-
Notifications
You must be signed in to change notification settings - Fork 4.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Provide lastbind overlay #68075
Comments
That's a configuration parameter of the application. https://man7.org/linux/man-pages/man5/slapd-config.5.html Please take a look at the upstream documentation to know more about it. You can use the LDAP_CUSTOM_LDIF_DIR to provide a custom directory with your configuration. |
Thanks for the reply. I tried adding it to my 00_config.ldif (see below) that is placed in /ldifs, but that fails with
I also tried to create an overlay ldif, but since the .so/.la file is missing that doesn't work either. Do I need to build it on my own? # Create the root entry for the domain
dn: dc=example,dc=com
objectClass: top
objectClass: dcObject
objectClass: organization
o: Example Organization
dc: example
# Create organizational unit for people
dn: ou=People,dc=example,dc=com
objectClass: organizationalUnit
ou: People
# Create organizational unit for groups
dn: ou=Groups,dc=example,dc=com
objectClass: organizationalUnit
ou: Groups
# 01_update_config.ldif part
#dn: cn=config
#changetype: modify
#add: olcLastBind
#olcLastBind: TRUE |
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback. |
Hi @boesr, We confirmed that the libraries are not included in the container as you mentioned. We are going to continue reviewing and investigating the issue. In case you want to include the .so/.a files on your own, you would need to build OpenLDAP and the module and copy the necessary files to the running container
You will see the files there and you can copy them to the running container |
Hi again, A new revision of the docker image is being built now and it'll probably be available soon. We enabled the olcLastBind feature this way and everything looks great. The libraries are inside the /opt/bitnami/openldap/libexec/openldap/ directory
and we executed the following commands:
As you can see, the configuration parameter is enabled and we didn't get any error. Please confirm everything works as expected |
Hi @jotamartos, thanks for the reply and integration the libraries. I will test it as soon as it is released and get back to you with the result. |
Hi @jotamartos I just tested the new release and can confirm, that the configuration is working like you explained. Many thanks for the quick solution. I added the config to my compose file for bootstrapping it. If anyone is interested how: services:
openldap:
container_name: openldap
image: bitnami/openldap:2.6.8-debian-12-r4
ports:
- '389:389'
- '636:636'
environment:
LDAP_LDAPS_PORT_NUMBER: 636
LDAP_PORT_NUMBER: 389
LDAP_ALLOW_ANON_BINDING: no
LDAP_ROOT: ${LDAP_ROOT:-dc=example,dc=com}
LDAP_ADMIN_USERNAME: ${LDAP_ADMIN_USERNAME:-admin}
LDAP_ADMIN_PASSWORD: ${LDAP_ADMIN_PASSWORD:-myadminpassword}
LDAP_EXTRA_SCHEMAS: cosine,inetorgperson,argon2,ldapPublicKey,memberof,lastBind
LDAP_ENABLE_TLS: yes
LDAP_TLS_CERT_FILE: /opt/bitnami/openldap/certs/ldap-server-cert.pem
LDAP_TLS_KEY_FILE: /opt/bitnami/openldap/certs/ldap-server-key.pem
LDAP_TLS_CA_FILE: /opt/bitnami/openldap/certs/ldap-ca-cert.pem
volumes: # I cutted out the other volumes (e.g. for ldapPublicKey and memberOf) to make it more clear
- './openldap/ldifs/lastBind.ldif:/opt/bitnami/openldap/etc/schema/lastBind.ldif'
env_file:
- .env
volumes:
openldap_data:
|
This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback. |
Name and Version
bitnami/openldap:2.6.8-debian-12-r1
What is the problem this feature will solve?
There probably should be lastbind included. Unfortunately the lastbind.so / lastbind.la files are not present in the container and till now I haven't been able to add it. According to #43045, it should be sufficient to add the option somewhere.
What is the feature you are proposing to solve the problem?
Compile the .so / .la files so we could activate the overlay via a ldif.
The text was updated successfully, but these errors were encountered: