前段时间在本地搭建了一套gitlab geo测试环境,因为需要集成ldap,所以特意搭建下,特此作为笔记记录下。
安装docker-compose
安装docker
创建挂载目录
cat docker-openldap.yml
version: '2'
services:
openldap:
image: osixia/openldap:1.5.0
container_name: openldap
restart: always
environment:
LDAP_LOG_LEVEL: "256"
LDAP_ORGANISATION: "ldap" ### 您的组织名称
LDAP_DOMAIN: "wkx.cn" ### 公司域名
LDAP_BASE_DN: "dc=wkx,dc=cn" ### 根据域名组成
LDAP_ADMIN_PASSWORD: "Jh@2022" ### 密码自己来设置
LDAP_CONFIG_PASSWORD: "Jh@2022"
LDAP_READONLY_USER: "false"
LDAP_RFC2307BIS_SCHEMA: "false"
LDAP_BACKEND: "mdb"
LDAP_REPLICATION: "false"
KEEP_EXISTING_CONFIG: "false"
LDAP_REMOVE_CONFIG_AFTER_SETUP: "true"
tty: true
stdin_open: true
volumes:
- /opt/openldap/ldap:/var/lib/ldap
- /opt/openldap/slapd.d:/etc/ldap/slapd.d
- /opt/openldap/certs:/container/service/lapd/assets/certs
ports:
- "389:389"
- "636:636"
domainname: "wkx.cn"
hostname: "ldap-server"
phpldapadmin:
image: osixia/phpldapadmin:latest
container_name: phpldapadmin
restart: always
environment:
PHPLDAPADMIN_LDAP_HOSTS: "192.168.31.30" ### 如果部署后登录不进去有可能是这里出了问题,直接换为部署openldap服务的公网IP试试
PHPLDAPADMIN_HTTPS: "false"
ports:
- "50081:80"
depends_on:
- openldap
self-service-password:
container_name: self-service-password
image: tiredofit/self-service-password:latest
restart: always
ports:
- "50080:80"
environment:
- LDAP_SERVER=ldap://openldap:389
- LDAP_BINDDN=cn=admin,dc=wkx,dc=cn #默认就是cn=admin,dc=wkx,dc=cn
- LDAP_BINDPASS=Jh@2022
- LDAP_BASE_SEARCH=dc=wkx,dc=cn
- MAIL_FROM=smtp.163.com
- MAIL_FROM_NAME=账号自助服务平台
- SMTP_DEBUG=0
- SMTP_HOST=smtp.163.com
- SMTP_USER=wkx323@163.com
- SMTP_PASS=HTGCMxxFVLASxxxxRS
- SMTP_PORT=465
- SMTP_SECURE_TYPE=ssl
- SMTP_AUTH_ON=true
- NOTIFY_ON_CHANGE=true
volumes:
- /etc/localtime:/etc/localtime
- /opt/openldap/self-service-password/htdocs:/www/ssp
- /opt/openldap/self-service-password/logs:/www/logs
docker-compose -f docker-openldap.yml up -d
Create a child entry -> ** Generic: Posix Group** -> 输入group名dev
Create a child entry -> ** Generic: User Account** -> 输入用户名和属性信息dev