Compare commits
27 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| d36efe4c25 | |||
| c6299b6e83 | |||
| 4da5e17456 | |||
| c14a72836a | |||
| d663f97b98 | |||
| 9e920acb53 | |||
| fcd900f507 | |||
| f248692f64 | |||
| 550732ad8c | |||
| 72fa68fadb | |||
| 57b06a04f7 | |||
| 8bac11f63b | |||
| 6a871308b8 | |||
| 9846ff1f97 | |||
| c112c1aed0 | |||
| 4f75db14bf | |||
| e03ceebffa | |||
| 2712f1ea86 | |||
| 6ba005fc87 | |||
| f2f5efc8a2 | |||
| 7ed2c92af7 | |||
| 97e0b30346 | |||
| 71d80e7cf9 | |||
| bcd9c8a048 | |||
| 600ccd9228 | |||
| 46bfbec0cd | |||
| 1b96086e78 |
+8
-22
@@ -16,7 +16,7 @@
|
||||
# 该部分变量,在编译命令中通过 `--build-arg` 传入;如果未设置,则使用下面对应的默认值
|
||||
|
||||
ARG APP_NAME=openldap # 设置当前应用名称
|
||||
ARG APP_VER=2.6.6 # 设置当前应用版本
|
||||
ARG APP_VER=2.5.16 # 设置当前应用版本
|
||||
ARG REGISTRY_URL="docker.colovu.com/" # 设置默认仓库地址,默认为本地仓库;定义时需要包含末尾的`/`
|
||||
ARG APT_SOURCE=aliyun # 设置 apt-get 源:default / ustc / aliyun
|
||||
ARG LOCAL_URL="http://local.colovu.com/dist" # 编译镜像时指定用于加速的本地软件包存储服务器地址
|
||||
@@ -35,9 +35,8 @@ RUN select_source ${APT_SOURCE};
|
||||
|
||||
# 安装依赖的软件包及库
|
||||
# 官方推荐包:Cyrus SASL 2.1.27+、OpenSSL 1.1.1+、libevent 2.1.8+、libsodium(groff)
|
||||
RUN install_pkg libperl-dev libcrypto++-dev libsasl2-dev libevent-dev libdb5.3-dev groff groff-base
|
||||
# dbuilder已安装: libtool libltdl7 libltdl-dev libssl3 libssl-dev
|
||||
# groff: 解决`soelim: not found`问题
|
||||
RUN install_pkg libwrap0-dev libcrypt-dev libsodium-dev libsasl2-dev libevent-dev groff-base unixodbc-dev libperl-dev
|
||||
|
||||
# 参考文档:
|
||||
# 编译: https://www.cnblogs.com/si-jie/p/8214206.html
|
||||
@@ -62,25 +61,12 @@ RUN set -eux; \
|
||||
CPPFLAGS="-I/usr/local/include -D_GNU_SOURCE" \
|
||||
./configure \
|
||||
--prefix=/usr/local/${APP_NAME} \
|
||||
\
|
||||
--enable-dynamic --enable-syslog \
|
||||
\
|
||||
--enable-slapd --enable-cleartext --enable-crypt --enable-spasswd --enable-modules --enable-rlookups --enable-wrappers \
|
||||
\
|
||||
--enable-dnssrv=mod --enable-ldap=mod --enable-mdb=mod --enable-meta=mod --enable-asyncmeta=mod --enable-null=mod \
|
||||
--enable-passwd=mod --enable-perl=mod --enable-relay=mod --enable-sock=mod --enable-sql=mod \
|
||||
\
|
||||
--enable-overlays=mod --enable-accesslog=mod --enable-auditlog=mod --enable-autoca=mod --enable-collect=mod \
|
||||
--enable-constraint=mod --enable-dds=mod --enable-deref=mod --enable-dyngroup=mod --enable-dynlist=mod \
|
||||
--enable-homedir=mod --enable-memberof=mod --enable-otp=mod --enable-ppolicy=mod --enable-refint=mod \
|
||||
--enable-remoteauth=mod --enable-retcode=mod --enable-sssvlv=mod --enable-syncprov=mod --enable-unique=mod \
|
||||
--enable-valsort=mod \
|
||||
\
|
||||
--enable-argon2 \
|
||||
\
|
||||
--enable-balancer=mod \
|
||||
\
|
||||
--with-cyrus-sasl --with-tls=openssl --with-systemd=no --with-argon2=libsodium \
|
||||
--enable-slapd --enable-cleartext --enable-crypt --enable-spasswd --enable-modules \
|
||||
--enable-bdb --enable-mdb --enable-ndb=no --enable-sql=no \
|
||||
--enable-overlays \
|
||||
--enable-balancer \
|
||||
--with-cyrus-sasl --with-tls=openssl --with-systemd=no \
|
||||
; \
|
||||
make depend; \
|
||||
make -j "$(nproc)" && make install;
|
||||
@@ -111,7 +97,7 @@ ENV APP_NAME=${APP_NAME} \
|
||||
APP_VER=${APP_VER} \
|
||||
APP_EXEC=slapd \
|
||||
APP_USER=${APP_NAME} \
|
||||
LD_LIBRARY_PATH="/usr/local/${APP_NAME}/lib:/usr/local/${APP_NAME}/libexec/openldap" \
|
||||
LD_LIBRARY_PATH="/usr/local/${APP_NAME}/lib" \
|
||||
PATH="${PATH}:/usr/local/${APP_NAME}/sbin:/usr/local/${APP_NAME}/bin:/usr/local/${APP_NAME}/libexec"
|
||||
|
||||
LABEL \
|
||||
|
||||
@@ -8,13 +8,13 @@
|
||||
|
||||
**版本信息:**
|
||||
|
||||
- 2.6、latest
|
||||
- 2.5
|
||||
|
||||
**镜像信息:**
|
||||
|
||||
* 镜像地址:
|
||||
* 阿里云: registry.cn-shenzhen.aliyuncs.com/colovu/openldap:latest
|
||||
* Colovu Registry: docker.colovu.com/colovu/openldap:latest
|
||||
* 阿里云: registry.cn-shenzhen.aliyuncs.com/colovu/openldap:2.5
|
||||
* Colovu Registry: docker.colovu.com/colovu/openldap:2.5
|
||||
* 依赖镜像:colovu/debian:12
|
||||
|
||||
> 后续相关命令行默认使用 Aliyun ACR 镜像服务器做说明
|
||||
@@ -25,7 +25,7 @@ Docker 快速启动命令:
|
||||
|
||||
```shell
|
||||
# 从 Registry 服务器下载镜像并启动
|
||||
$ docker run -d --name imgname registry.cn-shenzhen.aliyuncs.com/colovu/openldap:latest
|
||||
$ docker run -d --name imgname registry.cn-shenzhen.aliyuncs.com/colovu/openldap:2.5
|
||||
```
|
||||
|
||||
- `registry.cn-shenzhen.aliyuncs.com/colovu/imgname:<TAG>`:镜像名称及版本标签 TAG;标签不指定时默认使用最新版本
|
||||
@@ -92,7 +92,7 @@ $ docker run --detach --rm --name openldap \
|
||||
--env LDAP_BIND_PASSWORD=bindpassword \
|
||||
--env LDAP_USERS=customuser \
|
||||
--env LDAP_PASSWORDS=custompassword \
|
||||
registry.cn-shenzhen.aliyuncs.com/colovu/openldap:latest
|
||||
registry.cn-shenzhen.aliyuncs.com/colovu/openldap:2.5
|
||||
```
|
||||
|
||||
则 OpenLDAP 容器初始化完成后,相关配置信息如下:
|
||||
@@ -138,7 +138,7 @@ $ docker run -it --rm --name mariadb-client \
|
||||
在初始化 `OpenLDAP` 容器时,如果没有预置配置文件,可以在命令行中设置相应环境变量对默认参数进行修改。类似命令如下(配置环境变量`APP_ENV_KEY_NAME`的值为`key_value`):
|
||||
|
||||
```shell
|
||||
$ docker run -d -e "APP_ENV_KEY_NAME=key_value" registry.cn-shenzhen.aliyuncs.com/openldap:latest
|
||||
$ docker run -d -e "APP_ENV_KEY_NAME=key_value" registry.cn-shenzhen.aliyuncs.com/openldap:2.5
|
||||
```
|
||||
|
||||
### 常规配置参数
|
||||
@@ -212,7 +212,7 @@ $ docker run -d -e "APP_ENV_KEY_NAME=key_value" registry.cn-shenzhen.aliyuncs.co
|
||||
|
||||
## 更新记录
|
||||
|
||||
- 2023/9/25 (2.6): 更新版本,基于 OpenLDAP 2.6.6,Debian 12。
|
||||
- 2023/8/1 (2.5): 更新版本,基于 OpenLDAP 2.5.16(LTS),Debian 12。
|
||||
|
||||
----
|
||||
|
||||
|
||||
@@ -25,8 +25,8 @@ for dir in ${APP_DIRS[@]}; do
|
||||
done
|
||||
|
||||
# 检测指定文件是否在配置文件存储目录存在,如果不存在则拷贝(新挂载数据卷、手动删除都会导致不存在)
|
||||
LOG_I "Check config files in: ${LDAP_ONLINE_CONF_DIR}"
|
||||
if [[ -z "$(ls -A "${LDAP_ONLINE_CONF_DIR}")" ]]; then
|
||||
LOG_I "Check config files in: ${APP_CONF_DIR}"
|
||||
if [[ -z "$(ls -A "${APP_CONF_DIR}")" ]]; then
|
||||
app_ensure_config_file_exist "${APP_CONF_DIR}" "${APP_DEF_DIR}" $(ls -A "${APP_DEF_DIR}")
|
||||
fi
|
||||
|
||||
|
||||
@@ -27,13 +27,13 @@ dn: cn=module,cn=config
|
||||
objectClass: olcModuleList
|
||||
cn: module
|
||||
olcModulepath: /usr/local/openldap/libexec/openldap
|
||||
olcModuleload: back_mdb.la
|
||||
olcModuleload: back_monitor.la
|
||||
#olcModuleload: back_mdb.la
|
||||
#olcModuleload: back_bdb.la
|
||||
olcModuleload: memberof.la
|
||||
olcModuleload: refint.la
|
||||
olcModuleload: ppolicy.la
|
||||
#olcModuleload: back_monitor.la
|
||||
#olcModuleload: refint.la
|
||||
#olcModuleload: memberof.la
|
||||
#olcModuleload: syncprov.la
|
||||
#olcModuleload: ppolicy.la
|
||||
|
||||
#
|
||||
# Schema settings
|
||||
|
||||
Reference in New Issue
Block a user