rroemhild/test-openldap repository overview

⁠OpenLDAP Docker Image for testing

This image⁠ provides an OpenLDAP Server for testing LDAP applications, i.e. unit tests. The server is initialized with the example domain planetexpress.com with data from the Futurama Wiki⁠.

Parts of the image are based on the work from Nick Stenning docker-slapd⁠ and Bertrand Gouny docker-openldap⁠.

The Flask extension flask-ldapconn⁠ use this image for unit tests.

⁠Features

• Initialized with data from Futurama
• Support for TLS (snake oil cert on build)
• memberOf overlay support
• MS-AD style groups support

⁠Usage

docker pull rroemhild/test-openldap
docker run --rm -p 10389:10389 -p 10636:10636 rroemhild/test-openldap

⁠Exposed ports

• 10389 (ldap)
• 10636 (ldaps)

⁠Exposed volumes

• /etc/ldap/slapd.d
• /etc/ldap/ssl
• /var/lib/ldap
• /run/slapd

⁠LDAP structure

⁠dc=planetexpress,dc=com

⁠ou=people,dc=planetexpress,dc=com

⁠cn=Hubert J. Farnsworth,ou=people,dc=planetexpress,dc=com

⁠cn=Philip J. Fry,ou=people,dc=planetexpress,dc=com

⁠cn=John A. Zoidberg,ou=people,dc=planetexpress,dc=com

⁠cn=Hermes Conrad,ou=people,dc=planetexpress,dc=com

⁠cn=Turanga Leela,ou=people,dc=planetexpress,dc=com

⁠cn=Bender Bending Rodríguez,ou=people,dc=planetexpress,dc=com

⁠cn=Amy Wong+sn=Kroker,ou=people,dc=planetexpress,dc=com

Amy has a multi-valued DN

⁠cn=admin_staff,ou=people,dc=planetexpress,dc=com

⁠cn=ship_crew,ou=people,dc=planetexpress,dc=com

⁠JAAS configuration

In case you want to use this OpenLDAP server for testing with a Java-based application using JAAS and the LdapLoginModule, here's a working configuration file you can use to connect.

other {
  com.sun.security.auth.module.LdapLoginModule REQUIRED
    userProvider="ldap://localhost/ou=people,dc=planetexpress,dc=com"
    userFilter="(&(uid={USERNAME})(objectClass=inetOrgPerson))"
    useSSL=false
    java.naming.security.principal="cn=admin,dc=planetexpress,dc=com"
    java.naming.security.credentials="GoodNewsEveryone"
    debug=true
    ;
};

This config uses the admin credentials to connect to the OpenLDAP server and to submit the search query for the user that enters their credentials. As username the uid attribute of each entry is used.