This docker base image was being build from Amazonlinux 2017.09.0.20170930 and use YUM repository to install OpenLDAP 2.4.40 while override the default database (default: hdb) to LMDB.
Execute a command below to start the Docker container as LDAP server:
docker run -d --rm -p 389:389 -p 636:636 --name openldap nico0arianto/openldap-mdbThere are two options by mount an external directories to the Docker container:
- Stores the database in local machine:
docker run -d --rm -v /home/ldap/db:/var/lib/ldap -p 389:389 -p 636:636 --name openldap nico0arianto/openldap-mdb- Include the certificate files into the Docker container:
docker run -d --rm -v /home/ldap/certs:/etc/openldap/certs -p 389:389 -p 636:636 --name openldap nico0arianto/openldap-mdbThere are few things that been defaulted in the configuration, LMBD and database monitor.
Password: changeit
Suffix: dc=example,dc=com Root DN: cn=Manager,dc=example,dc=com Password: changeit
Access: Full access by cn=Manager,dc=example,dc=com
To enable the LDAPS, will need to modify the config to set the certification files.
Here is the example of LDIF file:
# Replace the TLS Server Configuration
dn: cn=config
changetype: modify
replace: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: {{ TLS_CERTIFICATE_KEY_FILE }}
-
replace: olcTLSCertificateFile
olcTLSCertificateFile: {{ TLS_CERTIFICATE_FILE }}
-
replace: olcTLSCACertificateFile
olcTLSCACertificateFile: {{ TLS_CA_CERTIFICATE_FILE }}
(Note: Do replaced the {{ TLS_... }} above with the correct values)
Please do read this documentation Using TLS to know more details.
Important: By default the start script (refer to start.sh) did bind the ldaps.
Mostly, to start using the LDAP server, it will required a basic structure of the organization and member of the organization itself.
Here are few LDIF samples to create a simple organization:
- Creates a domain.
dn: dc=example,dc=com
objectclass: domain
dc: example
- Creates an organization.
dn: ou=Group,dc=example,dc=com
objectclass: organizationalUnit
ou: Group
dn: ou=People,dc=example,dc=com
objectclass: organizationalUnit
ou: People
- Creates a person and register as a member of people.
dn: cn=nico,ou=People,dc=example,dc=com
objectclass: person
cn: nico
sn: arianto
dn: cn=data,ou=Group,dc=example,dc=com
objectclass: groupOfNames
objectclass: top
cn: data
member: cn=nico,ou=People,dc=example,dc=com
Please do execute the LDIF scripts above with ldapmodify, ldapadd or similar tools after we can connect to running Docker container (e.g. openldap) with a command below:
docker exec -it openldap bash