mirror of
https://github.com/osixia/container-openldap.git
synced 2026-08-28 02:24:19 -05:00
94 lines
4.7 KiB
Bash
94 lines
4.7 KiB
Bash
OPENLDAP_BOOTSTRAP_ORGANIZATION="Example Org"
|
|
OPENLDAP_BOOTSTRAP_SUFFIX="dc=example,dc=org"
|
|
|
|
OPENLDAP_BOOTSTRAP_MODULES="back_mdb.so argon2.so ppolicy.so unique.so refint.so memberof.so syncprov.so"
|
|
OPENLDAP_BOOTSTRAP_SCHEMAS="core.ldif cosine.ldif inetorgperson.ldif rfc2307bis.ldif"
|
|
|
|
OPENLDAP_BOOTSTRAP_GLOBAL_SIZE_LIMIT=500
|
|
OPENLDAP_BOOTSTRAP_GLOBAL_TIME_LIMIT=120
|
|
OPENLDAP_BOOTSTRAP_GLOBAL_IDLE_TIMEOUT=3600
|
|
|
|
OPENLDAP_BOOTSTRAP_FRONTEND_PASSWORD_HASH="{ARGON2}"
|
|
|
|
OPENLDAP_BOOTSTRAP_CONFIG_ROOT_DN="cn=admin,cn=config"
|
|
OPENLDAP_BOOTSTRAP_CONFIG_ROOT_PASSWORD_HASHED=""
|
|
|
|
OPENLDAP_BOOTSTRAP_DATA_DATABASE_MAX_SIZE="10737418240" # 10Go
|
|
|
|
OPENLDAP_BOOTSTRAP_DATA_ROOT_DN="cn=admin,${OPENLDAP_BOOTSTRAP_SUFFIX}"
|
|
OPENLDAP_BOOTSTRAP_DATA_ROOT_PASSWORD_HASHED=""
|
|
|
|
OPENLDAP_BOOTSTRAP_DATA_READONLY=false
|
|
OPENLDAP_BOOTSTRAP_DATA_READONLY_DN="cn=readonly,${OPENLDAP_BOOTSTRAP_SUFFIX}"
|
|
OPENLDAP_BOOTSTRAP_DATA_READONLY_PASSWORD_HASHED=""
|
|
|
|
OPENLDAP_BOOTSTRAP_MONITOR_ENABLED=false
|
|
|
|
OPENLDAP_BOOTSTRAP_MONITOR_READONLY=false
|
|
OPENLDAP_BOOTSTRAP_MONITOR_READONLY_DN="cn=readonly-monitor,${OPENLDAP_BOOTSTRAP_SUFFIX}"
|
|
OPENLDAP_BOOTSTRAP_MONITOR_READONLY_PASSWORD_HASHED=""
|
|
|
|
OPENLDAP_BOOTSTRAP_TLS=false
|
|
OPENLDAP_BOOTSTRAP_TLS_CERT="/container/services/openldap/assets/certs/tls.crt"
|
|
OPENLDAP_BOOTSTRAP_TLS_CERT_KEY="/container/services/openldap/assets/certs/tls.key"
|
|
OPENLDAP_BOOTSTRAP_TLS_CA_CERT="/container/services/openldap/assets/certs/ca.crt"
|
|
OPENLDAP_BOOTSTRAP_TLS_VERIFY_CLIENT="allow"
|
|
OPENLDAP_BOOTSTRAP_TLS_PROTOCOL_MIN="3.4"
|
|
|
|
OPENLDAP_BOOTSTRAP_TLS_REQUIRED=false
|
|
|
|
OPENLDAP_BOOTSTRAP_REFINT=false
|
|
OPENLDAP_BOOTSTRAP_REFINT_ATTRIBUTES="member uniqueMember manager owner"
|
|
|
|
OPENLDAP_BOOTSTRAP_PPOLICY=false
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_HASH_CLEAR_TEXT=true
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_USE_LOCKOUT=true
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_CHECK_MODULE=""
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_GROUP_DN="ou=policies,${OPENLDAP_BOOTSTRAP_SUFFIX}"
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_POLICY_DN="cn=default,${OPENLDAP_BOOTSTRAP_PPOLICY_GROUP_DN}"
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_MIN_LENGTH=12
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_CHECK_QUALITY=0
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_IN_HISTORY=12
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_ALLOW_USER_CHANGE=true
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_SAFE_MODIFY=true
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_MUST_CHANGE=false
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_MIN_AGE=0
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_MAX_FAILURE=5
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_FAILURE_COUNT_INTERVAL=300
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_LOCKOUT=true
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_LOCKOUT_DURATION=900
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_MAX_AGE=7776000
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_EXPIRE_WARNING=1209600
|
|
OPENLDAP_BOOTSTRAP_PPOLICY_DEFAULT_GRACE_AUTH_NLIMIT=3
|
|
|
|
OPENLDAP_BOOTSTRAP_UNIQUE=false
|
|
OPENLDAP_BOOTSTRAP_UNIQUE_URIS="ldap:///?uid?sub ldap:///?mail?sub"
|
|
|
|
OPENLDAP_BOOTSTRAP_MEMBEROF=false
|
|
OPENLDAP_BOOTSTRAP_MEMBEROF_GROUP_OC=groupOfNames
|
|
OPENLDAP_BOOTSTRAP_MEMBEROF_MEMBER_AD=member
|
|
OPENLDAP_BOOTSTRAP_MEMBEROF_MEMBEROF_AD=memberOf
|
|
OPENLDAP_BOOTSTRAP_MEMBEROF_ADD_CHECK=true
|
|
OPENLDAP_BOOTSTRAP_MEMBEROF_DANGLING=ignore
|
|
|
|
OPENLDAP_BOOTSTRAP_REPLICATION=false
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_HOSTS="ldap://ldap1.example.org:3890 ldap://ldap2.example.org:3890" # a least 2 hosts required, in the same order on all LDAP servers
|
|
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_SYNCPROV_CHECKPOINT="100 10"
|
|
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_DATA_READONLY_DN="cn=replicator,${OPENLDAP_BOOTSTRAP_SUFFIX}"
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_DATA_READONLY_PASSWORD=""
|
|
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_DATA_SYNC_REPL_TEMPLATE="rid=\${OPENLDAP_BOOTSTRAP_REPLICATION_DATA_SYNC_REPL_RID} provider=\${OPENLDAP_BOOTSTRAP_REPLICATION_SYNC_REPL_PROVIDER} bindmethod=simple binddn=\"\${OPENLDAP_BOOTSTRAP_REPLICATION_DATA_READONLY_DN}\" credentials=\${OPENLDAP_BOOTSTRAP_REPLICATION_DATA_READONLY_PASSWORD} searchbase=\"\${OPENLDAP_BOOTSTRAP_SUFFIX}\" schemachecking=on type=refreshAndPersist retry=\"5 5 60 +\" timeout=3"
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_DATA_LIMITS="dn.exact=\"${OPENLDAP_BOOTSTRAP_REPLICATION_DATA_READONLY_DN}\" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited"
|
|
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_TLS="${OPENLDAP_BOOTSTRAP_TLS_REQUIRED}"
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_TLS_SYNC_REPL="starttls=critical tls_reqcert=demand"
|
|
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_MEMBEROF="${OPENLDAP_BOOTSTRAP_MEMBEROF}"
|
|
OPENLDAP_BOOTSTRAP_REPLICATION_MEMBEROF_SYNC_REPL="exattrs=${OPENLDAP_BOOTSTRAP_MEMBEROF_MEMBEROF_AD}"
|
|
|
|
OPENLDAP_BOOTSTRAP_LDIF_CONFIG_DIR="/container/services/openldap-bootstrap/assets/ldif/config"
|
|
OPENLDAP_BOOTSTRAP_LDIF_DATA_DIR="/container/services/openldap-bootstrap/assets/ldif/data"
|
|
OPENLDAP_BOOTSTRAP_SCRIPTS_DIR="/container/services/openldap-bootstrap/assets/scripts"
|