Crowd LDAP Server
Implementation of an LDAP server that delegates authentication to an Atlassian Crowd installation using the Crowd REST API.
This service allows your favourite SSO authentication source to be used from many legacy devices, appliances and systems.
The LDAP implementation is based on the Apache Directory Server v1.5.7,
which is distributed under the Apache License v2.0.
License
Crowd LDAP Server Bundle is licenced under the Apache License v2.0.
Copyright 2012 Dieter Wimberger
See NOTICE.txt for details.
Building
To build this source code, you will need Apache Maven 3 and Java JDK 7 or newer.
Then run:
mvn clean install
Configuration
You will need to edit etc/crowd.properties to specify the connection details of the
Crowd server after
adding an application to Crowd
If you are running run.sh you can alternatively set the configuration using these shell variables:
CROWD_APP_NAME
CROWD_APP_PW
CROWD_APP_URL
CROWD_URL
You can configure the LDAP port (default: 10389) and enable SSL in etc/crowd-ldap-server.properties
Running
You can run this service by executing:
./run.sh
or on Windows:
run.bat
Docker image
This application is also available as an Docker image stain/crowd-ldap-server.
docker pull stain/crowd-ldap-server
To instead build the Docker image from this source:
docker build -t crowd-ldap-server .
To run the image you will need to expose the port 10389 and specify the environment variables:
docker run -p 10389:10389 -e CROWD_URL=http://crowd.example.com:8095/crowd -e CROWD_APP_PW s3cret stain/crowd-ldap-server
The default variables are:
CROWD_APP_NAME crowd-ldap-server
CROWD_APP_PW crowd-ldap-server
CROWD_APP_URL http://crowd:8095/
CROWD_URL http://crowd:8095/crowd
This can thus be combined with the atlassian-crowd docker image:
docker run -p 8095:8095 --name crowd griff/crowd
After setting up http://localhost:8095/crowd with a valid license, you can
add an application to Crowd for
crowd-ldap-server as a Generic Application.
For the URL field either use http://example.com/ (as the LDAP server has not got a web interface) or
the URL of the service that ultimately will be using the LDAP server.
For the Remote Address field you should set the IP address as a range 172.17.0.0/16
as Docker will allocate virtual IP addresses dynamically. Note that the
actual range will vary per host.
To determine the IP address range, try
$ docker run busybox head -n1 /etc/hosts
172.17.0.21 1489e30925d0
Finally start the crowd-ldap-server container:
docker run --link crowd:crowd -p 10389:10389 -e CROWD_APP_PW s3cret stain/crowd-ldap-server