registry.selfdesign.org/docker/openldap-fusiondirectory

Introduction

Dockerfile to build a OpenLDAP Server with Fusion Directory Schema's Included. It includes all the functions in the OpenLDAP Image such as Multi-Master Replication, TLS, and other features.

This Container uses tiredofit/openldap as a base.

Changelog

Authors

Dave Conroy

Introduction
- Changelog
Prerequisites
Dependencies
Installation
Quick Start
Configuration
Maintenance
- Shell Access
References

Dependencies

To build this image you must have the OpenLDAP Image built and available. To utilize, you must also have the Fusion Directory Image image built and available.

Installation

Automated builds of the image are available on Registry and is the recommended method of installation.

docker pull tiredofit/openldap-fusiondirectory

Quick Start

The quickest way to get started is using docker-compose. See the examples folder for a working docker-compose.yml that can be modified for development or production use.
Set various environment variables to understand the capabilities of this image.
Map persistent storage for access to configuration and data files for backup.
Map Network Ports to allow external access.

Start openldap-fusiondirectory using:

docker-compose up

NOTE: Please allow up to 1 minutes for the application to start.

Data-Volumes

Please see OpenLDAP Image for Data Volume Configuration.

There is an additional data volume exposed:

Directory	Description
`/assets/fusiondirectory-custom/`	Place Schema files here to be imported into FusionDirectory

Environment Variables

Please see OpenLDAP Image for Environment Variables Configuration
There are specific environment variables to this image:

Variable	Description
`FUSIONDIRECTORY_ADMIN_USER`	Default FD Admin User - Default `fd-admin`
`FUSIONDIRECTORY_ADMIN_PASS`	Default FD Admin Password - Default `admin`
`ORGANIZATION`	Organization Name Default: `Example Organization`

Schema Installation

Depending on your choices, the following schemas are available for installation. You must have these also enabled on the FusionDirectory application image to make use of it. If you would like to reapply the schemas set REAPPLY_PLUGIN_SCHEMAS to TRUE.

Variable	Description
`REAPPLY_PLUGIN_SCHEMAS`	Reapply Plugin Schemas `TRUE` or `FALSE` - Default: `FALSE`
`PLUGIN_ALIAS`	Mail Aliases - Default: `FALSE`
`PLUGIN_APPLICATIONS`	Applications - Default: `FALSE`
`PLUGIN_ARGONAUT`	Argonaut - Default: `FALSE`
`PLUGIN_AUDIT`	Audit Trail - Default: `TRUE`
`PLUGIN_AUTOFS`	AutoFS - Default: `FALSE`
`PLUGIN_CERTIFICATES`	Manage Certificates - Default: `FALSE`
`PLUGIN_COMMUNITY`	Community Plugin - Default: `FALSE`
`PLUGIN_CYRUS`	Cyrus IMAP - Default: `FALSE`
`PLUGIN_DEBCONF`	Argonaut Debconf - Default: `FALSE`
`PLUGIN_DEVELOPERS`	Developers Plugin - Default: `FALSE`
`PLUGIN_DHCP`	Manage DHCP - Default: `FALSE`
`PLUGIN_DNS`	Manage DNS - Default: `FALSE`
`PLUGIN_DOVECOT`	Dovecot IMAP - Default: `FALSE`
`PLUGIN_DSA`	System Accounts - Default: `TRUE`
`PLUGIN_EJBCA`	Unknown - Default: `FALSE`
`PLUGIN_FAI`	Unknown - Default: `FALSE`
`PLUGIN_FREERADIUS`	FreeRadius Management - Default: `FALSE`
`PLUGIN_FUSIONINVENTORY`	Inventory Plugin - Default: `FALSE`
`PLUGIN_GPG`	Manage GPG Keys - Default: `FALSE`
`PLUGIN_IPMI`	IPMI Management - Default: `FALSE`
`PLUGIN_MAIL`	Mail Attributes - Default: `TRUE`
`PLUGIN_MIXEDGROUPS`	Unix/LDAP Groups - Default: `FALSE`
`PLUGIN_NAGIOS`	Nagios Monitoring - Default: `FALSE`
`PLUGIN_NETGROUPS`	NIS - Default: `FALSE`
`PLUGIN_NEWSLETTER`	Manage Newsletters - Default: `FALSE`
`PLUGIN_OPSI`	Inventory - Default: `FALSE`
`PLUGIN_PERSONAL`	Personal Details - Default: `TRUE`
`PLUGIN_POSIX`	Posix Groups - Default: `FALSE`
`PLUGIN_POSTFIX`	Postfix SMTP - Default: `FALSE`
`PLUGIN_PPOLICY`	Password Policy - Default: `TRUE`
`PLUGIN_PUPPET`	Puppet CI - Default: `FALSE`
`PLUGIN_PUREFTPD`	FTP Server - Default: `FALSE`
`PLUGIN_QUOTA`	Manage Quotas - Default: `FALSE`
`PLUGIN_RENATER_PARTAGE`	Unknown - Default: `FALSE`
`PLUGIN_REPOSITORY`	Argonaut Deployment Registry - Default: `FALSE`
`PLUGIN_SAMBA`	File Sharing - Default: `FALSE`
`PLUGIN_SOGO`	Groupware - Default: `FALSE`
`PLUGIN_SPAMASSASSIN`	Anti Spam - Default: `FALSE`
`PLUGIN_SQUID`	Proxy - Default: `FALSE`
`PLUGIN_SSH`	Manage SSH Keys - Default: `TRUE`
`PLUGIN_SUBCONTRACTING`	Unknown - Default: `FALSE`
`PLUGIN_SUDO`	Manage SUDO on Hosts - Default: `FALSE`
`PLUGIN_SUPANN`	SUPANN - Default: `FALSE`
`PLUGIN_SYMPA`	Sympa Mailing List - Default: `FALSE`
`PLUGIN_SYSTEMS`	Systems Management - Default: `TRUE`
`PLUGIN_USER_REMINDER`	Password Expiry - Default: `FALSE`
`PLUGIN_WEBLINK`	Display Weblink - Default: `FALSE`

Networking

Please see OpenLDAP Image for Networking Configuration

Maintenance

Shell Access

For debugging and maintenance purposes you may want access the containers shell.

docker exec -it openldap-fusiondirectory bash

NokiDev / docker-openldap-fusiondirectory