Skip to content

Latest commit

 

History

History
84 lines (63 loc) · 3.46 KB

README.md

File metadata and controls

84 lines (63 loc) · 3.46 KB

Troll Active Directory (AD)

This is essentially an Apache Directory Server (ApacheDS) with some Active Directory (AD) specific attributes added to make it feel like AD ; done primarily for testing purposes.

References

Make Fu

A Makefile is provided for convenience, though a part of me considers it abusing Makefiles.

  1. Run make help to see various supported commands.
  2. For the uninitiated, make docker [img=<img> tag=<tag>] builds the image as <img>:<tag> (default rkoul/adldap-docker:1.0.0dev) and make run [img=<img> tag=<tag>] runs it.
  3. make runssl [img=<img> tag=<tag>] starts the TLS listener as well.

you may want to check out the help menu for more details

Docker Fu

Run

you can run it with the default data and config

   docker run -it --rm -p 127.0.0.1:10389:10389  rkoul/adldap-docker:1.0.1

Or pass your own users/groups ldif file via a bind mount (see attributes in data/records.ldif)

	docker run -v /tmp/data:/ldap/data \
	    -e LDAP_USER_LDIF=myusers.ldif \
		-e LDAP_ADMIN_PASSWORD=secret \
		-e LDAP_DEBUG=true \
		-it --rm -p 127.0.0.1:10389:10389  rkoul/adldap-docker:1.0.1

For LDAPS, you can add a java keystore file in the mounted dir. (see make keystore)

	docker run -v /tmp/data:/ldap/data \
	    -e LDAP_USER_LDIF=myusers.ldif \
		-e LDAP_ADMIN_PASSWORD=secret \
		-e LDAP_KEYSTORE=mykeystore.jks \
		-e LDAP_KEYSTORE_PASSWORD=mypass \
		-e LDAP_DEBUG=true \
		-it --rm -p 127.0.0.1:10636:10636 rkoul/adldap-docker:1.0.1

Local Build

if you make changes, you can clone this repo and build a new version as under:

docker build -t adldap:0.0.1 .

Sample dataset

  • default LDAP admin bind credentials are uid=admin,ou=system and whatever is passed as LDAP_ADMIN_PASSWORD
  • the rest of the sample data is in data/records.ldif (the schema gets created via extensions.ldif which you can completely replace with another bind mount on :/ldap/extensions.ldif)
  • user basedn = ou=users,dc=example,dc=com
  • groups basedn = ou=groups,dc=example,dc=com
  • user password = secret
cn full name uid mail groups
rohit Rohit Koul rkoul [email protected] piedpiper, trinity, threecommaclub
richard Richard Hendricks rhendricks [email protected] piedpiper, trinity
gilfoyle Bertram Gilfoyle bgilfoyle [email protected] piedpiper
erlich Erlich Bachman ebachman [email protected] piedpiper, aviato
jianyang Jian Yang jyang [email protected] piedpiper
gavin Gavin Belson gbelson [email protected] hooli
russ Russ Hanneman rhanneman [email protected] threecommaclub
bighead Nelson Bighetti bnelson [email protected] hooli
jared Donald Dunn jared [email protected] piedpiper, hooli
dinesh Dinesh Chugtai dchugtai [email protected] piedpiper
monica Monica Hall mhall [email protected] raviga
laurie Laurie Bream lbream [email protected] raviga
anton Anton Server anton [email protected] -

There are also users adminuser, testuser & groups admins and testers should you just care for generic ones. Use an LDAP browser and look at it.