You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+18-18Lines changed: 18 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -93,30 +93,30 @@ By default TLS is enable, a certificate is created with the container hostname (
93
93
94
94
#### Use your own certificate
95
95
96
-
Add your custom certificate, private key and CA certificate in the directory **image/service/slapd/assets/ssl** adjust filename in **image/env.yaml** and rebuild the image ([see manual build](#manual-build)).
96
+
Add your custom certificate, private key and CA certificate in the directory **image/service/slapd/assets/certs** adjust filename in **image/env.yaml** and rebuild the image ([see manual build](#manual-build)).
97
97
98
-
Or you can set your custom certificate at run time, by mouting a directory containing thoses files to **/container/service/slapd/assets/ssl** and adjust there name with the following environment variables :
98
+
Or you can set your custom certificate at run time, by mouting a directory containing thoses files to **/container/service/slapd/assets/certs** and adjust there name with the following environment variables :
99
99
100
-
docker run -h ldap.example.org -v /path/to/certifates:/container/service/slapd/assets/ssl \
101
-
-e SSL_CRT_FILENAME=my-ldap.crt \
102
-
-e SSL_KEY_FILENAME=my-ldap.key \
103
-
-e SSL_CA_CRT_FILENAME=the-ca.crt \
100
+
docker run -h ldap.example.org -v /path/to/certifates:/container/service/slapd/assets/certs \
101
+
-e LDAP_TLS_CRT_FILENAME=my-ldap.crt \
102
+
-e LDAP_TLS_KEY_FILENAME=my-ldap.key \
103
+
-e LDAP_TLS_CA_CRT_FILENAME=the-ca.crt \
104
104
-d osixia/openldap
105
105
106
106
#### Disable TLS
107
-
Add -e USE_TLS=false to the run command :
107
+
Add -e LDAP_PROPOSE_TLS=false to the run command :
108
108
109
-
docker run -e USE_TLS=false -d osixia/openldap
109
+
docker run -e LDAP_PROPOSE_TLS=false -d osixia/openldap
110
110
111
111
### Multi master replication
112
112
Quick example, with the default config.
113
113
114
114
#Create the first ldap server, save the container id in LDAP_CID and get its IP:
115
-
LDAP_CID=$(docker run -h ldap.example.org -e USE_REPLICATION=true -d osixia/openldap)
115
+
LDAP_CID=$(docker run -h ldap.example.org -e LDAP_REPLICATION=true -d osixia/openldap)
#Add the pair "ip hostname" to /etc/hosts on each containers,
@@ -169,16 +169,16 @@ Required and used for new ldap server only :
169
169
-**LDAP_CONFIG_PASSWORD** Ldap Config password. Defaults to `config`
170
170
171
171
TLS options :
172
-
-**USE_TLS**: Add openldap TLS capabilities. Defaults to `true`
173
-
-**SSL_CRT_FILENAME**: Ldap ssl certificate filename. Defaults to `ldap.crt`
174
-
-**SSL_KEY_FILENAME**: Ldap ssl certificate private key filename. Defaults to `ldap.key`
175
-
-**SSL_CA_CRT_FILENAME**: Ldap ssl CA certificate filename. Defaults to `ca.crt`
172
+
-**LDAP_PROPOSE_TLS**: Add openldap TLS capabilities. Defaults to `true`
173
+
-**LDAP_TLS_CRT_FILENAME**: Ldap ssl certificate filename. Defaults to `ldap.crt`
174
+
-**LDAP_TLS_KEY_FILENAME**: Ldap ssl certificate private key filename. Defaults to `ldap.key`
175
+
-**LDAP_TLS_CA_CRT_FILENAME**: Ldap ssl CA certificate filename. Defaults to `ca.crt`
176
176
177
177
Replication options :
178
-
-**USE_REPLICATION**: Add openldap replication capabilities. Defaults to `false`
179
-
-**REPLICATION_CONFIG_SYNCPROV**: olcSyncRepl options used for the config database. Without **rid** and **provider** which are automaticaly added based on REPLICATION_HOSTS. Defaults to `binddn="cn=admin,cn=config" bindmethod=simple credentials=$LDAP_CONFIG_PASSWORD searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 starttls=critical`
180
-
-**REPLICATION_HDB_SYNCPROV**: olcSyncRepl options used for the HDB database. Without **rid** and **provider** which are automaticaly added based on REPLICATION_HOSTS. Defaults to `binddn="cn=admin,$BASE_DN" bindmethod=simple credentials=$LDAP_ADMIN_PASSWORD searchbase="$BASE_DN" type=refreshAndPersist interval=00:00:00:10 retry="5 5 300 5" timeout=1 starttls=critical`
181
-
-**REPLICATION_HOSTS**: list of replication hosts, must contains the current container hostname set by -h on docker run command. Defaults to `['ldap://ldap.example.org', 'ldap://ldap2.example.org']`
178
+
-**LDAP_REPLICATION**: Add openldap replication capabilities. Defaults to `false`
179
+
-**LDAP_REPLICATION_CONFIG_SYNCPROV**: olcSyncRepl options used for the config database. Without **rid** and **provider** which are automaticaly added based on LDAP_REPLICATION_HOSTS. Defaults to `binddn="cn=admin,cn=config" bindmethod=simple credentials=$LDAP_CONFIG_PASSWORD searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 starttls=critical`
180
+
-**LDAP_REPLICATION_HDB_SYNCPROV**: olcSyncRepl options used for the HDB database. Without **rid** and **provider** which are automaticaly added based on LDAP_REPLICATION_HOSTS. Defaults to `binddn="cn=admin,$BASE_DN" bindmethod=simple credentials=$LDAP_ADMIN_PASSWORD searchbase="$BASE_DN" type=refreshAndPersist interval=00:00:00:10 retry="5 5 300 5" timeout=1 starttls=critical`
181
+
-**LDAP_REPLICATION_HOSTS**: list of replication hosts, must contains the current container hostname set by -h on docker run command. Defaults to `['ldap://ldap.example.org', 'ldap://ldap2.example.org']`
sed -i "s,/container/service/slapd/assets/ssl/ca.crt,/container/service/slapd/assets/ssl/${SSL_CA_CRT_FILENAME},g" /container/service/slapd/assets/config/tls/tls-enable.ldif
161
-
sed -i "s,/container/service/slapd/assets/ssl/ldap.crt,/container/service/slapd/assets/ssl/${SSL_CRT_FILENAME},g" /container/service/slapd/assets/config/tls/tls-enable.ldif
162
-
sed -i "s,/container/service/slapd/assets/ssl/ldap.key,/container/service/slapd/assets/ssl/${SSL_KEY_FILENAME},g" /container/service/slapd/assets/config/tls/tls-enable.ldif
160
+
sed -i "s,/container/service/slapd/assets/certs/ca.crt,/container/service/slapd/assets/certs/${LDAP_TLS_CA_CRT_FILENAME},g" /container/service/slapd/assets/config/tls/tls-enable.ldif
161
+
sed -i "s,/container/service/slapd/assets/certs/ldap.crt,/container/service/slapd/assets/certs/${LDAP_TLS_CRT_FILENAME},g" /container/service/slapd/assets/config/tls/tls-enable.ldif
162
+
sed -i "s,/container/service/slapd/assets/certs/ldap.key,/container/service/slapd/assets/certs/${LDAP_TLS_KEY_FILENAME},g" /container/service/slapd/assets/config/tls/tls-enable.ldif
0 commit comments