crowdcode/apacheds-docker repository overview

⁠ApacheDS

This Docker image provides an ApacheDS⁠ LDAP server. Optionally it could be used to provide a Kerberos server⁠ as well.

The project sources can be found on GitHub⁠. The Docker image on Docker Hub⁠.

⁠Installation

The folder /var/lib/apacheds-${APACHEDS_VERSION} contains the runtime data and thus has been defined as a volume. A volume container⁠ could be used for that. The image uses exactly the file system structure defined by the ApacheDS documentation⁠.

The container can be started issuing the following command:

docker run --name ldap -d -p 389:10389 openmicroscopy/apacheds

⁠Installation with your own domain

docker run --name ldap -e APACHEDS_DOMAIN=yourdomain -e APACHEDS_TOP_DOMAIN=yourtopDomain -d -p 389:10389 openmicroscopy/apacheds

This provides for a preconfigured partition dc=yourdomain,dc=yourtopDomain.

⁠Usage

You can manage the ldap server with the admin user uid=admin,ou=system and the default password secret. The default instance comes with a pre-configured partition dc=openmicroscopy,dc=org.

An indivitual admin password should be set following this manual⁠.

Then you can import entries into that partition via your own ldif file:

ldapadd -v -h <your-docker-ip>:389 -c -x -D uid=admin,ou=system -w <your-admin-password> -f sample.ldif

⁠Customization

It is also possible to start up your own defined Apache DS instance with your own configuration for partitions and services. Therefore you need to mount your config.ldif⁠ file and set the APACHEDS_INSTANCE environment variable properly. In the provided sample configuration the instance is named default. Assuming your custom instance is called yourinstance the following command will do the trick:

docker run --name ldap -d -p 389:10389 -e APACHEDS_INSTANCE=yourinstance -v /path/to/your/config.ldif:/bootstrap/conf/config.ldif:ro openmicroscopy/apacheds

It would be possible to use this ApacheDS image to provide a Kerberos server⁠ as well. Just provide your own config.ldif file for that. Don't forget to expose the right port, then.

Also other services are possible. For further information read the configuration documentation⁠.