87 lines
2.2 KiB
Markdown
87 lines
2.2 KiB
Markdown
# ldapdock
|
|
*_a configurable container running openLDAP_*
|
|
|
|
A step by step approach on how to setup and run the openLDAP server on a classic systemd-less Docker image container, **optional steps are marked with __*__**
|
|
|
|
### _Creating the ldapdock container_
|
|
|
|
build ldapdock
|
|
```
|
|
> docker build -t ldapdock /path/to/dockerfile
|
|
```
|
|
|
|
__*__ after build, check the docker image has been created properly with the given REPOSITORY name
|
|
```
|
|
> docker images
|
|
REPOSITORY TAG IMAGE ID CREATED SIZE
|
|
ldapdock latest 0e4a1521b346 6 hours ago 138MB
|
|
```
|
|
|
|
run into the container setting up the LDAP server and the hostname
|
|
```
|
|
> docker run -h example.com -i -t ldapdock /bin/bash
|
|
```
|
|
|
|
### _Inside the ldapdock image_
|
|
|
|
start the openLDAP daemon server
|
|
```
|
|
> service slapd start
|
|
* Starting OpenLDAP slapd [ OK ]
|
|
```
|
|
|
|
__*__ edit base configuration of openLDAP server
|
|
```
|
|
> vim /etc/ldap/ldap.conf
|
|
```
|
|
|
|
create a **password** for openLDAP root user
|
|
```
|
|
> slappasswd
|
|
New password:
|
|
Re-enter new password:
|
|
{SSHA}hashpwd
|
|
```
|
|
|
|
__*__ checkout the root DN configuration, the oldRootDN that we will setup later
|
|
```
|
|
> ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=config "(olcRootDN=*)" olcRootDN
|
|
dn: olcDatabase={0}config,cn=config
|
|
olcRootDN: cn=admin,cn=config
|
|
|
|
dn: olcDatabase={1}mdb,cn=config
|
|
olcRootDN: cn=admin,dc=example,dc=com
|
|
```
|
|
|
|
### _Base administrative Tasks for openLDAP_
|
|
|
|
create a file setting up our default root DN and our *hostname* **(change *dc=example,dc=com* as needed)**
|
|
```
|
|
> vim change_root.ldif
|
|
dn: olcDatabase={1}mdb,cn=config
|
|
changetype: modify
|
|
replace: olcRootDN
|
|
olcRootDN: cn=admin,dc=example,dc=com
|
|
```
|
|
now save this changes in the main database
|
|
```
|
|
> ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f change_root.ldif
|
|
```
|
|
|
|
create a file setting up our default rootPW **(change *{SSHA}hashpwd* with our previous *password*)**
|
|
```
|
|
> vim change_password.ldif
|
|
dn: olcDatabase={1}mdb,cn=config
|
|
changetype: modify
|
|
replace: olcRootPW
|
|
olcRootPW: {SSHA}hashpwd
|
|
```
|
|
now apply our new password for the main database
|
|
```
|
|
> ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f change_password.ldif
|
|
modifying entry "olcDatabase={1}mdb,cn=config"
|
|
```
|
|
we are done with our openLDAP root configuration and can begin creating new LDAP directories (.ldif files)
|
|
|
|
|