You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+28Lines changed: 28 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -77,6 +77,9 @@ services:
77
77
image: lscr.io/linuxserver/ldap-auth:latest
78
78
container_name: ldap-auth
79
79
environment:
80
+
- PUID=1000
81
+
- PGID=1000
82
+
- TZ=Etc/UTC
80
83
- FERNETKEY= #optional
81
84
- CERTFILE= #optional
82
85
- KEYFILE= #optional
@@ -91,6 +94,9 @@ services:
91
94
```bash
92
95
docker run -d \
93
96
--name=ldap-auth \
97
+
-e PUID=1000 \
98
+
-e PGID=1000 \
99
+
-e TZ=Etc/UTC \
94
100
-e FERNETKEY= `#optional` \
95
101
-e CERTFILE= `#optional` \
96
102
-e KEYFILE= `#optional` \
@@ -108,6 +114,9 @@ Containers are configured using parameters passed at runtime (such as those abov
108
114
| :----: | --- |
109
115
|`-p 8888`| the port for ldap auth daemon |
110
116
|`-p 9000`| the port for ldap login page |
117
+
|`-e PUID=1000`| for UserID - see below for explanation |
118
+
|`-e PGID=1000`| for GroupID - see below for explanation |
119
+
|`-e TZ=Etc/UTC`| specify a timezone to use, see this [list](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List). |
111
120
|`-e FERNETKEY=`| Optionally define a custom valid fernet key (only needed if container is frequently recreated, or if using multi-node setups, invalidating previous authentications) |
112
121
|`-e CERTFILE=`| Optionally point this to a certificate file to enable HTTP over SSL (HTTPS) for the ldap auth daemon |
113
122
|`-e KEYFILE=`| Optionally point this to the private key file, matching the certificate file referred to in CERTFILE |
@@ -129,6 +138,24 @@ Will set the environment variable `MYVAR` based on the contents of the `/run/sec
129
138
For all of our images we provide the ability to override the default umask settings for services started within the containers using the optional `-e UMASK=022` setting.
130
139
Keep in mind umask is not chmod it subtracts from permissions based on it's value it does not add. Please read up [here](https://en.wikipedia.org/wiki/Umask) before asking for support.
131
140
141
+
## User / Group Identifiers
142
+
143
+
When using volumes (`-v` flags), permissions issues can arise between the host OS and the container, we avoid this issue by allowing you to specify the user `PUID` and group `PGID`.
144
+
145
+
Ensure any volume directories on the host are owned by the same user you specify and any permissions issues will vanish like magic.
146
+
147
+
In this instance `PUID=1000` and `PGID=1000`, to find yours use `id your_user` as below:
[](https://mods.linuxserver.io/?mod=ldap-auth"view available mods for this container.")[](https://mods.linuxserver.io/?mod=universal"view available universal mods.")
@@ -255,6 +282,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
255
282
256
283
## Versions
257
284
285
+
***30.06.24:** - Rebase to Alpine 3.20.
258
286
***23.12.23:** - Rebase to Alpine 3.19.
259
287
***20.06.23:** - Sync upstream changes, including the ability to disable referrals with `X-Ldap-DisableReferrals`.
260
288
***25.05.23:** - Rebase to Alpine 3.18, deprecate armhf.
0 commit comments