CHANGELOG.md

2.6-8.0.2 2026-03-09

Added

  - OpenLDAP 2.6.13

2.6-8.0.1 2026-01-29

Added

  - OpenLDAP 2.6.12

2.6-8.0.0 2025-12-19

Changed

  - Change base image to nfrastack/base
  - Cleanup build code
  - Cleanup bootstrapping functions
  - Add LOG_PREFIX allowing to output proper human dates
  - Cracklib wordlist updated to 2.10.3
  - Removed S3 backup support
  - Change values of environment variables

2.6-7.7.99 2025-11-09

Add EOL notice and deprecate image

2.6-7.7.8 2025-09-01

Changed

  - Fix trailing - for TLS_DH_PARAM_LDIF_ENABLE environment variable

2.6-7.7.7 2025-09-01

Changed

  - Fix issue with TLS scripting on initial boot (@credit devicarus)

2.6-7.7.6 2025-08-13

Changed

  - Fix for 7.7.5 TLS LDIF Enabling

2.6-7.7.5 2025-08-13

Added

  - Add TLS_ENABLE_DH_PARAM environment variable

Changed

  - Change TLS Cipher Suites to HIGH:!aNULL:!MD5:!3DES:!RC4:!DES:!eNULL

2.6-7.7.4 2025-08-12

Added

  - Add ca-certificates to run-deps

2.6-7.7.3 2025-05-22

Added

  - OpenLDAP 2.6.10

2.6-2.6-7.8 2025-05-22

Added

  - OpenLDAP 2.6.10

2.6-7.7.2 2024-12-07

Added

  - Pin to tiredofit/alpine:3.21

2.6-7.7.1 2024-11-27

Changed

  - Repair issues with 2.6-7.7.0

2.6-7.7.0 2024-11-27

Added

  - Add memberOfAddCheck to memberOf Overlay (TRUE)
  - Add settings to enable nestgroup overlay on first init

2.6-7.6.13 2024-11-26

Added

  - Add Audit log module
  - Add constraint module
  - Add deref module
  - Add dyngroup module
  - Add dynlist module
  - Add nestgroup module
  - Add proxycache module
  - Add Syslog Support
  - Add valsort module

2.6-7.6.12 2024-11-26

Added

  - OpenLDAP 2.6.9

2.6-7.6.11 2024-07-05

Added

  - Rebuild to support tiredofit/alpine:7.10.0

2.6-7.6.10 2024-06-17

Added

  - Rebuild of 2.6-7.6.9

2.6-7.6.9 2024-05-23

Added

  - Add libevent, libsasl, libuuid runtime dependencies

2.6-7.6.8 2024-05-22

Added

  - Switch to tiredofit/alpine 3.20 base

2.6-7.6.7 2024-05-21

Added

  - OpenLDAP 2.6.8

2.6-7.6.6 2023-12-08

Added

  - Change base image to tiredofit/alpine:3.19

2.6-7.6.5 2023-12-04

Changed

  - Change REPLICATION wrappers from <> to {}

2.6-7.6.4 2023-11-16

Changed

  - Restore READONLY_USER_* variables on database initial creation

2.6-7.6.3 2023-07-31

Added

  - OpenLDAP 2.6.6

2.6-7.6.2 2023-07-11

Added

  - OpenLDAP 2.6.5

2.6-7.6.1 2023-05-31

Changed

  - Fix for backups not being created in tar format
  - Transform config and data files into their own folder in tar file for better extraction

2.6-2.6-7.6 2023-05-10

Changed

  - Alpine 3.18 base

2.6-7.5.0 2023-04-26

Added

  - Add support for _FILE environment variables

2.6-7.4.2 2023-04-21

Changed

  - Fix for enabling replication

2.6-7.4.1 2023-03-30

Added

  - Add autoregister support for new OpenLDAP Zabbix backup template

2.6-7.4.0 2023-03-30

Changed

  - Rework OpenLDAP Backup routines to become more in line with parent tiredofit/db-backup image
  - config and data both get compressed into same tar file going forward
  - Added ability to create "latest" symlink to last good backup
  - Added ability to "archive" backups to an archive folder after a specified period of time for better external backup capabilities

2.6-7.3.2 2023-03-07 adrianparilli@github

Changed

  - Fix for Custom schemas not loading

2.6-7.3.1 2023-02-23

Changed

  - Fix for update_template function not firing

2.6-7.3.0 2023-02-22

Added

  - Compatibility with Docker 23.0.0 and newer versions of Kubernetes
  - Modernize image

2.6-7.2.19 2023-02-21

Changed

  - Modernize Dockerfile

2.6-7.2.18 2023-02-21

Added

  - OpenLDAP 2.6.4

7.2.17 2022-11-23

Added

  - Alpine 3.17 base

7.2.16 2022-11-03

Changed

  - Switch ADD to COPY

7.2.15 2022-08-17

Changed

  - Switch to using exec to launch process

7.2.14 2022-08-06

Changed

  - Minor tweak to loading custom scripts

7.2.13 2022-07-14

Changed

  - Silence warning with a dirty chown command

7.2.12 2022-07-14

Changed

  - Stop patching one of the makefiles to allow successful builds

7.2.11 2022-07-14

Added

  - OpenLDAP 2.6.3

7.2.10 2022-07-09 sniper7kills@github

Fixed

  - Custom Schemas not inserting properly

7.2.9 2022-07-05

Changed

  - Version Bump for dependencies

7.2.8 2022-05-24

Added

  - Alpine 3.16 base

7.2.7 2022-05-15

Added

  - OpenLDAP 2.6.2

7.2.6 2022-04-25

Changed

  - Fix to allow RFC2307bis schemas to install

7.2.5 2022-03-14

Changed

  - Fix for slapd-restore and S6 Overlay 3.xx

7.2.4 2022-03-01

Added

  - OpenLDAP 2.6.1

Changed

  - Repair quirks with OpenLDAP script (S3 backups, temp directories)
  - Disable anonymous bind on initial OpenLDAP setup
  - Rework replication to deprecate olcMirrorMode attributes
  - Code Cleanup and modernization

7.2.3 2021-12-07

Added

  - Add Zabbix Auto register support for templates

7.2.2 2021-11-24

Added

  - Alpine 3.15 base

7.2.1 2021-11-12

Changed

  - Fix for 7.2.0 - Ppolicy schema is wrapped into the module now, and solve some configuration test issues

7.2.0 2021-11-09 tiredofit@github

Added

  - OpenLDAP 2.6.0

7.1.22 2021-09-15 bmalovyn@github

Changed

  - Wait for slapd to really be ready before running ldapmodify

7.1.21 2021-09-06

Changed

  - Fix for ENABLE_BACKUP=FALSE disabling main slapd process

7.1.20 2021-09-04

Changed

  - Change the way logrotation is configured for future log parsing capabilities

7.1.19 2021-09-01

Changed

  - Change internal envionrment variables to accomodate for upstream changes

7.1.18 2021-07-05

Added

  - OpenLDAP 2.4.59
  - Alpine 3.14 Base

7.1.17 2021-06-01 janpolito@github

Fixed

  - slapd-restore script wasn't restoring gzipped databases

7.1.16 2021-05-08

Added

  - Introduce `REPLICATION_SAFETY_CHECK` variable to bypass DNS checking of replication hosts

7.1.15 2021-04-20

Added

  - Add support for smbk5pwd overlay (credit: @ludwig-burtscher)
  - Fix custom script sorting

7.1.14 2021-03-18

Added

  - OpenLDAP 2.4.58

7.1.13 2021-03-18

Added

  - OpenLDAP 2.4.58

7.1.12 2021-03-18 jkrenzer@github

Added

  - Autogroup overlay

7.1.11 2021-03-15

Changed

  - Fix sloppy S3 backup configuration

7.1.10 2021-02-13

Changed

  - Fix to compile pixz with new musl base

7.1.9 2021-02-13

Added

  - OpenLDAP 2.4.57

Changed

  - Change /assets/custom-scripts/ location for executing post backups scripts to /assets/custom-backup-scripts/

7.1.8 2021-01-14

Changed

  - Alpine 3.13 Base

7.1.7 2020-11-25

Changed

  - Change the way that custom scripts execute - Don't force chmod +x for files already.

7.1.6 2020-11-14

Added

  - Openldap 2.4.56

7.1.5 2020-11-06

Added

  - OpenLDAP 2.4.55

7.1.4 2020-09-26 frznvm0@github

Changed

  - Fix ldap.conf from being copied onto itself

7.1.3 2020-09-14

Added

  - OpenLDAP 2.4.53

7.1.2 2020-08-31 bfidel@github

Changed

  - Fix for BASE_DN getting overwritten when DOMAIN environment variable exists

7.1.1 2020-08-31

Changed

  - Delete OLC limits from replication

7.1.0 2020-08-11

Added

  - Add SHA2 password support
  - Add Argon password support

Reverted

  - Remove Nginx for Letsencrypt Certificate Generation - It served its purpose, there are better ways now.

7.0.3 2020-07-26

Added

  - Add change-password shell script for quickly changing config/schema passwords

7.0.2 2020-06-25

Added

  - Rewrote entire image seperating into functions
  - Rewrote TLS functionality, now generating CA, KEY, CERT via image instead of Cloudflare helper scripts - Check your settings!
  - Implemented Logging to File functionality with logrotate `LOG_TYPE=FILE`)
  - Rewrote Backup Routines - Now has the capabilities of backing up multiple times per day and various compression options
  - Support multiple log levels

Changed

  - Reworked some Ppolicy routines

Reverted

  - Helper scripts removed
  - Removed HDB Database functionality, only supporting mdb going forward

6.9.2 2020-06-18

Changed

  - Fixed initialization script not pulling defaults properly

6.9.1 2020-06-15

Added

  - Alpine 3.12

6.9.0 2020-06-09

Added

  - Update to support tiredofit/alpine 5.0.0 base image

6.8.9 2020-06-01

Changed

  - Patchup for 6.8.8

6.8.8 2020-06-01

Changed

  - Repairs for LDAP local client referencing proper TLS CA, Cert, and Key Files

6.8.7 2020-05-06

Added

  - OpenLDAP 2.4.50

6.8.6 2020-05-06

Changed

  - Fix for TLS DH_PARAM environment variable substitution

6.8.5 2020-04-28

Changed

  - Move code that was not a function out of functions file

6.8.3 2020-04-27

Changed

  - Patchup for DHParam not utilizing full path when generating

6.8.2 2020-04-16

Changed

  - Fix for SLAPD_ARGS variable default
  - Fix for TLS_RESET_PERMISSIONS
  - Fix for generating dhparam.pem files on read only file systems (credit eduardosan@github)

6.8.1 2020-04-16 frebib@github

Added

  - Allow overriding slapd runtime arguments

Changed

  - Fixed spelling mistake for OpenLDAP version

6.8.0 2020-04-15

Added

  - Environment Variables to control keysize of DH Param file
  - New variables to define custom TLS Patches
  - New variables to skip changing ownership on TLS Certificates

Changed

  - Moved environment variable defaults to /assets/functions/10-openldap
  - Cleanup of TLS functionality to support new environment variables
  - Properly support ULIMIT_N environment variable
  - Fix Default for Nginx

6.7.2 2020-03-04

Added

  - Update image to support new tiredofit/alpine:4.4.0 base

6.7.1 2020-02-13

Added

  - OpenLDAP 2.4.49

6.7.0 2020-01-14 sargreal@github

Added

  - Add Secrets support for `CONFIG_PASS` `ADMIN_PASS` `READONLY_USER_PASS`

6.6.2 2020-01-02

Changed

  - Change to use LibreSSL instead of OpenSSL for creating dhparam.pem
  - Change warnings to notices
  - Fix when ENABLE_NGINX=FALSE container fails to initialize
  - Fix with Nginx run script looping with error

6.6.1 2019-12-30

Added

  - Allow configurable ULIMIT_N environment variable for open file descriptors

6.6.0 2019-12-29

Added

  - Update to support new tiredofit/alpine base image

6.5.1 2019-12-20

Added

  - Alpine 3.11 Base

6.5 2019-08-25

• OpenLDAP 2.4.48

6.4 2019-06-19

• Alpine 3.10

6.3.2 2019-03-21

• Fixup

6.3.1 2019-03-21

• Update Cracklist Words to 2.9.7

6.3 2019-03-21

• Expose 389, 636 and 80 Ports

6.2 2018-12-27

• OpenLDAP 2.4.47

6.1 2018-12-05

• Fix Replication upon container/pod restart

6.0.2 2018-09-13

• Fix for Dockerfile Build when applying OpenLDAP Patches to be displayed correctly

6.0.1 2018-08-27

• Fix with ppm.conf generation for bad characters

6.0 2018-08-18

• Stop relying on slapd.conf on first time initialization
• Properly apply ACLs for ppolicy
• Generate Wordlist for ppm.so
• Automatically generate check_password.conf and ppm.conf

5.5 2018-08-16

• Fix for ACLs not applying on initial boot

5.4 2018-08-08

• Add alternative Password Checking Module ppm.so
• Provide Default Configurations for check_password.conf and ppm.conf

5.3 2018-07-24

• Stop being so thorough with exiting script when replicating - Fixed cont-init.d/10-openldap prematurely exiting with error 20

5.2 2018-07-21

• Zabbix Monitoring Fixup

5.1 2018-07-21

• Add a sanity checker for Replication errors if hostname doesn't exist in DNS or malformed IP address which causes container start fail on 2nd try
• Cleanup Config Pass item

5.0 2018-07-19

• Rewrite entire image
• Alpine 3.8
• Compiled from source
• ppolicy-check module included

4.1 2018-07-11

• Fix Replication
• Add Custom Assets

4.0 2017-10-20

• Base update w/ S6
• Add Fail2Ban
• Script Cleanup

3.4 2017-07-05

• Fix Daily Backup Routines

3.3 2017-07-05

• Update Zabbix Checks

3.2 2017-07-03

• Fix Cron Backup

3.1 2017-03-20

• Added Dyanmic Zabbix Ports for LDAP Checking

3.0 2017-03-20

• Full Rebuild From Ground Up - Simplified Dockerfile and Code
• Self Signed Certs only at present

2.2 2017-02-22

• Added nginx for dummy site to take advantage of Lets Encrypt SSL Certs

2.1 2017-02-22

• Added man, vim

2.0 2017-02-14

• Rebase with new Baseimage
• Added Zabbix Agent

1.0 2017-01-03