Open FlorianWolters opened 1 month ago
Hi. The account you're creating in the LDIF (uid=max.mustermann,ou=people,dc=example,dc=org) is a different account from the admin account you created for the OpenLDAP container. You should change LDAP_ADMIN_BIND_DN=uid=max.mustermann,ou=people,dc=example,dc=org
to e.g. LDAP_ADMIN_BIND_DN=uid=max.mustermann,dc=example,dc=org
.
Sorry for the late response.
Updating from LDAP_ADMIN_BIND_DN=uid=max.mustermann,ou=people,dc=example,dc=org
to LDAP_ADMIN_BIND_DN=uid=max.mustermann,dc=example,dc=org
in the docker-compose.yml
file does not work.
Message in the web UI after login:
Problem: Failed to bind as uid=max.mustermann,dc=example,dc=org
Also, I don't see why both accounts in my OP should be different. Imo, they are different after this change.
Actually it probably should be cn=max.mustermann,dc=example,dc=org
. It's the value of LDAP_ADMIN_DN
in the bitnami/openldap
container. The documentation on their Docker hub page doesn't say what that defaults to, so if cn=max.mustermann,dc=example,dc=org
doesn't work then you might need to exec into the ldap container and run env | grep LDAP_ADMIN_DN
to find the actual DN for the admin user. If that doesn't work, you can try slapcat -b cn=config
in that container instead.
I am using
wheelybird/ldap-user-manager:v1.11
together withbitnami/openldap:2
.I was able to get everything up and running without using a custom LDIF file. Even with a custom LDIF file (see below) I am able to log into the GUI, but as soon as I try to create a LDAP user I got the following error message in the GUI:
The log of the
ui
container contains the following:I assume this is related to permissions / ACLs in the LDAP server itself and not a problem of the GUI. I am posting this here, because I think this project could benefit from some kind of documentation on how to get it initially up and running without having to call the
/setup
URL.I created the
setup.ldif
file, based on theldapsearch -x -b "dc=example,dc=org" -H ldap://0.0.0.0:1389
command (run in thebackend
container) after getting it up and running without a custom configuration.I searched on the WWW, but the LDAP stuff is too advanced for me (I am a total LDAP newbie).
I would be glad if someone can explain what must be added, in order to get this project up and running without having to interact with the
/setup
URL. I assume, something has to be added to thesetup.ldif
file.Here are the relevant files:
docker-compose.yml
setup.ldif