mirror of
https://github.com/osixia/container-openldap.git
synced 2026-09-24 07:25:17 -05:00
38 lines
1.5 KiB
YAML
38 lines
1.5 KiB
YAML
# General container configuration
|
|
# see table 5.1 in http://www.openldap.org/doc/admin24/slapdconf2.html for the available log levels.
|
|
LDAP_LOG_LEVEL: 256
|
|
|
|
# Required and used for new ldap server only
|
|
LDAP_ORGANISATION: Example Inc.
|
|
LDAP_DOMAIN: example.org
|
|
LDAP_ADMIN_PASSWORD: admin
|
|
LDAP_CONFIG_PASSWORD: config
|
|
|
|
LDAP_READONLY_USER: false
|
|
LDAP_READONLY_USER_USERNAME: readonly
|
|
LDAP_READONLY_USER_PASSWORD: readonly
|
|
|
|
# Tls
|
|
LDAP_TLS: true
|
|
LDAP_TLS_CRT_FILENAME: ldap.crt
|
|
LDAP_TLS_KEY_FILENAME: ldap.key
|
|
LDAP_TLS_CA_CRT_FILENAME: ca.crt
|
|
|
|
LDAP_TLS_CIPHER_SUITE: SECURE256:-VERS-SSL3.0
|
|
LDAP_TLS_PROTOCOL_MIN: 3.1
|
|
LDAP_TLS_VERIFY_CLIENT: demand
|
|
|
|
# Replication
|
|
LDAP_REPLICATION: false
|
|
# variables $LDAP_BASE_DN, $LDAP_ADMIN_PASSWORD, $LDAP_CONFIG_PASSWORD
|
|
# are automaticaly replaced at run time
|
|
|
|
# if you want to add replication to an existing ldap
|
|
# adapt LDAP_REPLICATION_CONFIG_SYNCPROV and LDAP_REPLICATION_HDB_SYNCPROV to your configuration
|
|
# avoid using $LDAP_BASE_DN, $LDAP_ADMIN_PASSWORD and $LDAP_CONFIG_PASSWORD variables
|
|
LDAP_REPLICATION_CONFIG_SYNCPROV: binddn="cn=admin,cn=config" bindmethod=simple credentials=$LDAP_CONFIG_PASSWORD searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical
|
|
LDAP_REPLICATION_HDB_SYNCPROV: binddn="cn=admin,$LDAP_BASE_DN" bindmethod=simple credentials=$LDAP_ADMIN_PASSWORD searchbase="$LDAP_BASE_DN" type=refreshAndPersist interval=00:00:00:10 retry="60 +" timeout=1 starttls=critical
|
|
LDAP_REPLICATION_HOSTS:
|
|
- ldap://ldap.example.org # The order must be the same on all ldap servers
|
|
- ldap://ldap2.example.org
|