mirror of
https://github.com/bitnami/containers.git
synced 2026-02-10 21:27:26 +08:00
[bitnami/openldap] Release 2.6.10-debian-12-r4 (#85427)
Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
This commit is contained in:
@@ -8,7 +8,7 @@ ARG TARGETARCH
|
||||
|
||||
LABEL com.vmware.cp.artifact.flavor="sha256:c50c90cfd9d12b445b011e6ad529f1ad3daea45c26d20b00732fae3cd71f6a83" \
|
||||
org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
|
||||
org.opencontainers.image.created="2025-07-17T02:39:28Z" \
|
||||
org.opencontainers.image.created="2025-08-16T03:02:35Z" \
|
||||
org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
|
||||
org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/openldap/README.md" \
|
||||
org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/openldap" \
|
||||
|
||||
@@ -235,7 +235,7 @@ Note: bitnami has some custom module pathing. Specifically the slapd module load
|
||||
|
||||
Here is an example of loading the memberof overlay with an /entrypoint-initdb.d/ script
|
||||
|
||||
The **memberOf** overlay is widely used in OpenLDAP to automatically populate the `memberOf` attribute on user entries based on group membership.
|
||||
The **memberOf** overlay is widely used in OpenLDAP to automatically populate the `memberOf` attribute on user entries based on group membership.
|
||||
This short example demonstrates how to add the overlay during Bitnami OpenLDAP container bootstrap using `slapadd`, with correct LDIF formatting and troubleshooting tips.
|
||||
|
||||
1. **Determine the next available module DN:**
|
||||
@@ -257,7 +257,6 @@ objectClass: olcModuleList
|
||||
cn: module{1}
|
||||
olcModulePath: /opt/bitnami/openldap/libexec/openldap
|
||||
olcModuleLoad: memberof.so
|
||||
|
||||
dn: olcOverlay=memberof,olcDatabase={2}mdb,cn=config
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcMemberOf
|
||||
@@ -275,10 +274,8 @@ Finally a script should be placed or mounted to /docker-entrypoint-initdb.d/. No
|
||||
#!/bin/bash
|
||||
# Script to enable memberOf overlay in OpenLDAP
|
||||
set -e
|
||||
|
||||
# Note: cn=module{1},cn=config assumes that the module will be loaded as the second module. cn=module{0} being the first.
|
||||
# Additionally, olcDatabase={2}mdb assumes that the database is the second one configured in OpenLDAP. Adjust as necessary.
|
||||
|
||||
# Create a temporary LDIF file
|
||||
# ensure cn=module{N},cn=config and cn: module{N} match eachother and do not conflict with existing modules. Run `slapcat -F /opt/bitnami/openldap/etc/slapd.d -b cn=config | grep 'cn=module'` to check existing modules.
|
||||
cat > /tmp/memberof-overlay.ldif << 'EOF'
|
||||
@@ -338,25 +335,21 @@ objectClass: dcObject
|
||||
objectClass: organization
|
||||
dc: your
|
||||
o: Your Organization
|
||||
|
||||
# Organizational Units
|
||||
dn: ou=Users,dc=your,dc=example,dc=com
|
||||
objectClass: top
|
||||
objectClass: organizationalUnit
|
||||
ou: Users
|
||||
|
||||
dn: ou=Groups,dc=your,dc=example,dc=com
|
||||
objectClass: top
|
||||
objectClass: organizationalUnit
|
||||
ou: Groups
|
||||
|
||||
# Admin group
|
||||
dn: cn=some_admins,ou=Groups,dc=your,dc=example,dc=com
|
||||
objectClass: top
|
||||
objectClass: groupOfNames
|
||||
cn: some_admins
|
||||
description: An administrators group
|
||||
|
||||
# Tester group
|
||||
dn: cn=testers,ou=Groups,dc=your,dc=example,dc=com
|
||||
objectClass: top
|
||||
|
||||
Reference in New Issue
Block a user