[{"_1":2,"_164":-5,"_165":-5},"loaderData",{"_3":4,"_18":19,"_25":26,"_143":144},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":11,"_24":22},"username","isAskGordonEnabled",true,"showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_130":-5,"_131":11,"_132":22,"_133":11,"_134":11,"_135":11,"_136":-5,"_137":11,"_138":-5,"_139":140,"_141":91,"_142":-7},"canonicalUrl","https://chstno1.isgood.host/r/blueapple/openldap-sasl-proxy-docker/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","blueapple","reponame","openldap-sasl-proxy-docker","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":22,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2018-09-17T07:09:11.606703Z","description","Pass-Trough authentication with SASL","is_private","last_updated","2018-09-18T02:02:33.759788Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",415,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# openldap-sasl-passtrough-authorization-docker\n\n## Example for build your own container with OpenLDAP Pass-Trough authentication with SASL from Dockerfile\n```sh\ndocker build -t openldap --build-arg \\\n--build-arg LDAP_SERVERS=\"ldap://YOUR_MAIN_SERVER_IP:389/\" \\\n--build-arg LDAP_SEARCH_BASE=\"MAIN_SERVER_SEARCH_BASE\" \\\n--build-arg LDAP_FILTER=\"(sAMAccountName=%U)\" \\\n--build-arg LDAP_BIND_DN=\"MAIN_SERVER_USER_BIND\" \\\n--build-arg LDAP_PASSWORD=\"MAIN_SERVER_USER_PASSWORD\" \\\n--build-arg LDAP_DN_BASE=\"MAIN_SERVER_DN_BASE\" \\\n--build-arg LDAP_ORGANIZATION=\"ORGANIZATION_NAME_FOR_FIRST_OU\" \\\n--build-arg LDAP_ROOT_DN=\"MANAGER_USER\" \\\n--build-arg LDAP_ROOT_PW=\"TEXT_PLAIN_PASSWORD OR \\{SSHA\\}SSHA_GENERATED_CODE_PASSWORD\" \\\n.\n```\nRunning slapd（运行 slapd）\nslapd(8) is designed to be run as a stand-alone server. This allows the server to take advantage of caching, manage concurrency issues with underlying databases, and conserve system resources. Running from inetd(8) is NOT an option.\nslapd(8) 被设计成独立运行的服务器。它允许服务利用缓存、用潜在的数据库管理并发内容以及避免浪费系统资源。不要从 inetd(8) 中运行。\n\nCommand-Line Options（命令行选项）\nslapd(8) supports a number of command-line options as detailed in the manual page. This section details a few commonly used options.\nslapd(8) 支持许多命令行选项，这在手册页中有详细说明。本部门详细说明一些常用的选项。\n\n-f \n\nThis option specifies an alternate configuration file for slapd. The default is normally /usr/local/etc/openldap/slapd.conf.\n该选项为 slapd 指定另一个配置文件。默认的是通常在 /usr/local/etc/openladp/slapd.conf\n\n译者注：Ubuntu 中为 /etc/openladp/slapd.conf\n\n-h \n\nThis option specifies alternative listener configurations. The default is ldap:/// which implies LDAP over TCP on all interfaces on the default LDAP port 389. You can specify specific host-port pairs or other protocol schemes (such as ldaps:// or ldapi://). For example, -h \"ldaps:// ldap://127.0.0.1:666\" will create two listeners: one for LDAP over SSL on all interfaces on the default LDAP/SSL port 636, and one for LDAP over TCP on the localhost (loopback) interface on port 666. Hosts may be specified using IPv4 dotted-decimal form or using host names. Port values must be numeric.\n该选项指定另一个监听配置。默认是 ldap:///，这意味着 LDAP 是架构在 TCP 之上的其所有接口都是基于默认的 LDAP 端口 389。您可以特别指定其主机-端口或其它的协议模式（如 ldaps:// 或 ldapi://）。举个例子， -h \"ldaps:// ldap://127.0.0.1:666\" 将创建两个监听器：一个是架构在 SSL 之上且其所有接口都是基于默认的 LDAP／SSL 端口 636。而另一个则是架构在本机接口（环回口）之上的其接口基于 666 端口。主机可以使用 IPv4 的十进制加点的表示形式，或使用主机名。端口值必须是数字。\n\n-n \n\nThis option specifies the service name used for logging and other purposes. The default service name is slapd.\n该选项为日志和其他目的指定服务名。默认服务名是 slapd。\n\n-l \n\nThis option specifies the local user for the syslog(8) facility. Values can be LOCAL0, LOCAL1, LOCAL2, ..., and LOCAL7. The default is LOCAL4. This option may not be supported on all systems.\n本选项为 syslog(8) 指定一个本地用户。其值可以是 LOCAL0、LOCAL1、LOCAL2...到 LOCAL7。缺省值为 LOCAL4。本选项可能不会被所有系统支持。\n\n-u user -g group\n\nThese options specify the user and group, respectively, to run as. user can be either a user name or uid. group can be either a group name or gid.\n这些选项分别指定用户和用户组来运行。用户可以是用户名或 uid。用户组也可以是组名或 gid。\n\n-r directory\n\nThis option specifies a run-time directory. slapd will chroot(2) to this directory after opening listeners but before reading any configuration files or initializing any backends.\n本选项指定一个运行时目录。slapd 在打开监听器之后读任何配置文件或初始化任何后台之前将 chroot(2) 该目录。\n-d | ?\n\nThis option sets the slapd debug level to . When level is a `?' character, the various debugging levels are printed and slapd exits, regardless of any other options you give it. Current debugging levels are\n本选项在中设置 slapd 的调试级别。当级别是 '?' 字符时，将打印出各种调试级别并退出 slapd，而不管您所给的其它任何选项。当前调试级别是：\n\nTable: Debugging Levels （调试级别）\nLevel（级别）\tDescription（说明）\n0\tno debugging（没有调试）\n1\ttrace function calls（跟踪函数调用）\n2\tdebug packet handling（跟踪包处理）\n4\theavy trace debugging（大量跟踪调试）\n8\tconnection management（连接管理）\n16\tprint out packets sent and received（打印出发送和接收的包）\n32\tsearch filter processing（搜索过滤器处理过程）\n64\tconfiguration file processing（配置文件处理过程）\n128\taccess control list processing（访问控制列表处理过程）\n256\tstats log connections/operations/results（连接／操作／结果统计日志）\n512\tstats log entries sent（条目发送统计日志）\n1024\tprint communication with shell backends（使用 shell 后台打印通讯）\n2048\tprint entry parsing debugging（打印条目解析调试过程）\n\nYou may enable multiple levels by specifying the debug option once for each desired level. Or, since debugging levels are additive, you can do the math yourself. That is, if you want to trace function calls and watch the config file being processed, you could set level to the sum of those two levels (in this case, -d 65). Or, you can let slapd do the math, (e.g. -d 1 -d 64). Consult for more details.\n您可以在调试选项中一次性为所有所需级别启用多个调试级别。或者，由于调试级别是可以相加的，因此您也可以自己加出来。也就是说，如果您想跟踪函数调用同时又要查看正在处理的配置文件，那么您可以设置该级别为这两个级别之和（在本例中是-d 65）。或者，您可以让 slapd 自己计算（如 -d 1 -d 64）。更多细节请参阅。\n\nNote: slapd must have been compiled with -DLDAP_DEBUG defined for any debugging information beyond the two stats levels to be available.\n注意：为了使得两个统计级别以外的调试信息生效，slapd 必须要在编译时定义 -DLDAP_DEBUG。\n\nStarting slapd（开始 slapd）\n\nIn general, slapd is run like this:\n通常使用如下命令运行 slapd：\n\n/usr/local/etc/libexec/slapd [

blueapple/openldap-sasl-proxy-docker

Tags for blueapple/openldap-sasl-proxy-docker