A generic openldap container.
LdapPort
: (optional, default 8389) Port on which the slapd daemon listens. Must be unprivilged.
$ docker run -e LDAP_SUFFIX='dc=example,dc=org' -e LDAP_ROOT_ASSWORD=secret -d %%IMAGE%%
This creates an empty backend for the given suffix with the root DN set to
cn=root,<suffix>
. The container runs unpriviliged and exposes unpriviliged
port 8389. A custom port can be specified during build using the build
argument LdapPort
.
When LDAP_SUFFIX
is not set or empty, no backend will be created. This
allows to create a custom backend by dropping an ldif file in
/docker-entrypoint-init/ (see below).
The container can be run as any user as long as the user's gid=0.
For additional initialization, add one or more .ldif
files under
/docker-entrypoint-init/. They will be executed before starting the service.
(example)
If the ldif file contains a changetype
attribute, it will be executed by
ldapmodify
, otherwise it will be executed by ldapadd
.
When the initialization is complete, the container starts listening on the exposed port.