67 lines
1.7 KiB
Markdown
67 lines
1.7 KiB
Markdown
# Openldap
|
|
|
|
## Description
|
|
This docker compose install openldap container
|
|
|
|
## Requierments
|
|
### Folder
|
|
```bash
|
|
sudo mkdir -p /home/docker/openldap/certs
|
|
```
|
|
### Certificats
|
|
Copy files `gmolab.net.crt`, `gmolab.net.key` and `gmolabCA.net` from `/home/docker/certs` folder to `/home/docker/openldap/certs`
|
|
```bash
|
|
sudo cp /home/docker/certs/gmolabCA.crt /home/docker/openldap/certs/
|
|
sudo cp /home/docker/certs/gmolab.net.key /home/docker/openldap/certs/
|
|
sudo cp /home/docker/certs/gmolab.net.crt /home/docker/openldap/certs/
|
|
```
|
|
|
|
### Group and Owner
|
|
```bash
|
|
sudo chown 1001 /home/docker/openldap -R
|
|
```
|
|
1001 is important because the container is running with user no-root
|
|
|
|
## Delete Directory
|
|
ATTENTION. The command below delete the entire directory.
|
|
This is useful when you want to test configs (problems with certificates)
|
|
```bash
|
|
./reinit-ldap.sh
|
|
```
|
|
|
|
## Run
|
|
```bash
|
|
docker compose up -d
|
|
```
|
|
|
|
## Init ldap
|
|
Initialize the openldap ditectory
|
|
```bash
|
|
./ldap-init.sh
|
|
```
|
|
## LDAP commands
|
|
* Get all entry in directory
|
|
```bash
|
|
ldapsearch -H ldaps://gmoadm.gmolab.net:1636 -x -D 'cn=Access LDAP,ou=people,dc=gmolab,dc=net' -b 'dc=gmolab,dc=net' -w pa55w0rd
|
|
```
|
|
* Get Config
|
|
```bash
|
|
docker exec ldap /bin/bash -c "ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=config '(objectClass=olcDatabaseConfig)'"
|
|
```
|
|
* Get olcAccess
|
|
```bash
|
|
docker exec ldap /bin/bash -c "ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=config '(objectClass=olcDatabaseConfig)' olcAccess"
|
|
```
|
|
* Get Modules
|
|
```bash
|
|
docker exec ldap /bin/bash -c "ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=config '(objectClass=olcModuleList)' "
|
|
```
|
|
|
|
## Sources
|
|
[Bitnami Openldap](https://hub.docker.com/r/bitnami/openldap)
|
|
|
|
## Changelog
|
|
### v1.0 - 2024-12-29
|
|
#### Added
|
|
- initial version by [GMo](mailto:gilles.mouchet@gmail.com)
|