akhilrajmailbox/ldap-server

LDAP with LDAP Account Manager (LAM)

Installation instruction and configuration :: https://github.com/akhilrajmailbox/LdapServer/tree/ldap-ubuntu-22.04

Deploy Ldap stack to Swarm

• Swarm Compose File

coce
# https://docs.docker.com/compose/compose-file/compose-file-v3/
version: '3.8'
services:
  ldap-server:
    image: akhilrajmailbox/ldap-server:lam-1.0.0
    environment:
      LDAP_DOMAIN: "devops.example.com"
      LDAP_ORGANISATION: "devops"
      # LDAP_SERVER_NAME: "My DevOps"
      # ALIAS: "devopssso"
      SSL_CONFIG: "y"
      HTPASSWORD_FILE: "/run/secrets/LDAP_HTPASSWORD_SECRET"
      LDAP_ADMIN_PASS_FILE: "/run/secrets/LDAP_ADMIN_PASS_SECRET"
      SSL_CERT: "/run/secrets/MY_SSL_CERT_SECRET"
      SSL_KEY: "/run/secrets/MY_SSL_KEY_SECRET"
      SSL_CACERT: "/run/secrets/MY_SSL_BUNDLE_SECRET"
    secrets:
      - LDAP_HTPASSWORD_SECRET
      - LDAP_ADMIN_PASS_SECRET
      - MY_SSL_CERT_SECRET
      - MY_SSL_KEY_SECRET
      - MY_SSL_BUNDLE_SECRET
    ports:
      - target: 636
        published: 636
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
    # healthcheck:
    #   test: ["CMD", "curl", "-f", "https://localhost:443/"]
    #   interval: 30s
    #   timeout: 10s
    #   retries: 3
    #   start_period: 120s
    labels:
      - "com.devops.service.name=ldap"
      - "com.devops.service.module=auth-provider"
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "com.devops.service.name=ldap"
        - "com.devops.service.module=auth-provider"
      update_config:
        parallelism: 1
        delay: 10s
        failure_action: pause # rollback
        monitor: 5s
        order: stop-first
      # rollback_config:
      #   parallelism: 1
      #   delay: 10s
      #   failure_action: pause
      #   monitor: 5s
      #   order: stop-first
      restart_policy:
        condition: any
        delay: 10s
        max_attempts: 5
        # window: 120s
      placement:
        max_replicas_per_node: 1
        constraints:
          - "node.role==manager"
          - "node.platform.os==linux"
      resources:
        limits:
          cpus: "1"
          memory: 2G
        reservations:
          cpus: "0.100"
          memory: 0.5G
    volumes:
      # Directory must exist on the Host
      - /DevOps/ldap-server/apache2:/etc/apache2
      # phpldap
      # - /DevOps/ldap-server/phpldapadmin:/etc/phpldapadmin
      # lamldap
      - /DevOps/ldap-server/lib-ldap-account-manager:/var/lib/ldap-account-manager
      - /DevOps/ldap-server/etc-ldap-account-manager:/etc/ldap-account-manager
      - /DevOps/ldap-server/ldap:/var/lib/ldap
      - /DevOps/ldap-server/ldapdb-backups:/var/backups
      - /DevOps/ldap-server/slapd.d:/etc/ldap/slapd.d
    networks:
      - swarm-network

secrets:
  LDAP_HTPASSWORD_SECRET:
    external: true
  LDAP_ADMIN_PASS_SECRET:
    external: true
  MY_SSL_CERT_SECRET:
    external: true
  MY_SSL_KEY_SECRET:
    external: true
  MY_SSL_BUNDLE_SECRET:
    external: true

networks:
  swarm-network:
    external: true
    name: swarm-network

Prerequisites

• The client and daemon API must both be at least 1.24 to use this command. Use the docker version command on the client to check your client and daemon API versions.
• You need at least Docker Engine 19.03.0+ for this to work (Compose specification: 3.8).

bash
docker version

Create custom Docker network before deploying container (If the network is already created then ignore it)

Note : Make sure that the subnet won't conflict with any other subnets

bash
docker network create --driver=overlay --subnet=172.29.1.0/24 swarm-network

Create docker secret

bash
echo "SomeSecretPass" | docker secret create LDAP_ADMIN_PASS_SECRET -
echo "SomeSecretPass" | docker secret create LDAP_HTPASSWORD_SECRET -
docker secret create MY_SSL_CERT_SECRET ./example.crt
docker secret create MY_SSL_KEY_SECRET ./example.key
docker secret create MY_SSL_BUNDLE_SECRET ./example-bundle.crt

Create Directory structure for swarm deployment

bash
mkdir -p /DevOps/ldap-server/{apache2,lib-ldap-account-manager,etc-ldap-account-manager,ldap,ldapdb-backups,slapd.d}

Deploy

bash
docker stack deploy --compose-file=Ldap-swarm.yml ldap-stack

Removing ldap stack

bash
docker stack rm ldap-stack

Working with ldap

• List the stack

bash
docker stack ls

• List the tasks in the stack

bash
docker stack ps ldap-stack

• List the services in the stack

bash
docker stack services ldap-stack

• find the docker conatiner ID and Login to ldap-stack server

bash
docker exec -it $(docker ps -q -f name=ldap-stack) /bin/bash

• Restarting ldap-stack

bash
docker stack deploy --compose-file=Ldap-swarm.yml ldap-stack

• check the logs of ldap-stack server

bash
docker logs -f $(docker ps -q -f name=ldap-stack)

• login to LDAP ui

Username: cn=admin,dc=devops,dc=example,dc=com
Password: LDAP_ADMIN_PASS

LDAP with phpldapadmin

Installation instruction and configuration :: https://github.com/akhilrajmailbox/LdapServer/tree/ldap-ubuntu-14.04

docker run command ::

MOUNT_LOCATION=/home/akhil/Desktop/vivasa/ldap-phpldapadmin/ldap-server/install
docker run --env-file env-file -v $MOUNT_LOCATION/mount/apache2:/etc/apache2 -v $MOUNT_LOCATION/mount/phpldapadmin:/etc/phpldapadmin -v $MOUNT_LOCATION/mount/ldap:/var/lib/ldap -v $MOUNT_LOCATION/mount/slapd.d:/etc/ldap/slapd.d -p <<host-port>>:80 -p <<host-port>>:389 -it --name <<container-name>> --hostname <<hostname>> akhilrajmailbox/ldap-server:latest /bin/bash

environment variable ::

Create a file with the following variable

# mandatory docker variable

LDAP_ADMIN_PASS		=	The Ldap admin password
LDAP_DOMAIN		=	The FQDN for your LDAP server
LDAP_ORGANISATION	=	Your organisation name
HTPASSWORD		=	The security password for 'phpldapadmin ui' login
ALIAS			=	Redirection alias for accessing your 'phpldapadmin ui' (http://ipaddress/ALIAS)
SSL_CONFIG		=	For choosing 'HTTP' or 'HTTPs' configuration of 'phpldapadmin'

NOTE :::

Possible values of 'docker variable'

*	LDAP_ADMIN_PASS		=	<<string>>
*	LDAP_DOMAIN             =       <<string>>     
*	LDAP_ORGANISATION       =       <<string>>
*	HTPASSWORD              =       <<string>>
*	ALIAS                   =       <<string>>
*	SSL_CONFIG              =       Y|y|n|N	(Y|y for 'HTTPS' & N|n for 'HTTP')

example environment file ::

# mandatory docker variable

LDAP_ADMIN_PASS=ubuntu
LDAP_DOMAIN=akhil.system.local.in
LDAP_ORGANISATION=infra
HTPASSWORD=admin
ALIAS=myldap
SSL_CONFIG=N

phpldapadmin_ui ::

• security password

admin           =               admin
password        =               HTPASSWORD (you need to provide with docker run command)

• php login password

admin		=		admin
password	=		LDAP_ADMIN_PASS (you need to provide with docker run command)