mirror of
https://github.com/grafana/grafana.git
synced 2025-02-25 18:55:37 -06:00
ca136c7c22
* Add LDAP config instead sed use * Add container name * Add SizeLimit option to client and to server. Probably useless at this point, but it's better to have it then otherwise
95 lines
3.0 KiB
Bash
Executable File
95 lines
3.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# When not limiting the open file descritors limit, the memory consumption of
|
|
# slapd is absurdly high. See https://github.com/docker/docker/issues/8231
|
|
ulimit -n 8192
|
|
|
|
|
|
set -e
|
|
|
|
chown -R openldap:openldap /var/lib/ldap/
|
|
|
|
if [[ ! -d /etc/ldap/slapd.d ]]; then
|
|
|
|
if [[ -z "$SLAPD_PASSWORD" ]]; then
|
|
echo -n >&2 "Error: Container not configured and SLAPD_PASSWORD not set. "
|
|
echo >&2 "Did you forget to add -e SLAPD_PASSWORD=... ?"
|
|
exit 1
|
|
fi
|
|
|
|
if [[ -z "$SLAPD_DOMAIN" ]]; then
|
|
echo -n >&2 "Error: Container not configured and SLAPD_DOMAIN not set. "
|
|
echo >&2 "Did you forget to add -e SLAPD_DOMAIN=... ?"
|
|
exit 1
|
|
fi
|
|
|
|
SLAPD_ORGANIZATION="${SLAPD_ORGANIZATION:-${SLAPD_DOMAIN}}"
|
|
|
|
cp -a /etc/ldap.dist/* /etc/ldap
|
|
|
|
cat <<-EOF | debconf-set-selections
|
|
slapd slapd/no_configuration boolean false
|
|
slapd slapd/password1 password $SLAPD_PASSWORD
|
|
slapd slapd/password2 password $SLAPD_PASSWORD
|
|
slapd shared/organization string $SLAPD_ORGANIZATION
|
|
slapd slapd/domain string $SLAPD_DOMAIN
|
|
slapd slapd/backend select HDB
|
|
slapd slapd/allow_ldap_v2 boolean false
|
|
slapd slapd/purge_database boolean false
|
|
slapd slapd/move_old_database boolean true
|
|
EOF
|
|
|
|
dpkg-reconfigure -f noninteractive slapd >/dev/null 2>&1
|
|
|
|
dc_string=""
|
|
|
|
IFS="."; declare -a dc_parts=($SLAPD_DOMAIN)
|
|
|
|
for dc_part in "${dc_parts[@]}"; do
|
|
dc_string="$dc_string,dc=$dc_part"
|
|
done
|
|
|
|
if [[ -n "$SLAPD_CONFIG_PASSWORD" ]]; then
|
|
password_hash=`slappasswd -s "${SLAPD_CONFIG_PASSWORD}"`
|
|
|
|
sed_safe_password_hash=${password_hash//\//\\\/}
|
|
|
|
slapcat -n0 -F /etc/ldap/slapd.d -l /tmp/config.ldif
|
|
sed -i "s/\(olcRootDN: cn=admin,cn=config\)/\1\nolcRootPW: ${sed_safe_password_hash}/g" /tmp/config.ldif
|
|
rm -rf /etc/ldap/slapd.d/*
|
|
slapadd -n0 -F /etc/ldap/slapd.d -l /tmp/config.ldif >/dev/null 2>&1
|
|
fi
|
|
|
|
if [[ -n "$SLAPD_ADDITIONAL_SCHEMAS" ]]; then
|
|
IFS=","; declare -a schemas=($SLAPD_ADDITIONAL_SCHEMAS); unset IFS
|
|
|
|
for schema in "${schemas[@]}"; do
|
|
slapadd -n0 -F /etc/ldap/slapd.d -l "/etc/ldap/schema/${schema}.ldif" >/dev/null 2>&1
|
|
done
|
|
fi
|
|
|
|
if [[ -n "$SLAPD_ADDITIONAL_MODULES" ]]; then
|
|
IFS=","; declare -a modules=($SLAPD_ADDITIONAL_MODULES); unset IFS
|
|
|
|
for module in "${modules[@]}"; do
|
|
echo "Adding module ${module}"
|
|
slapadd -n0 -F /etc/ldap/slapd.d -l "/etc/ldap/modules/${module}.ldif" >/dev/null 2>&1
|
|
done
|
|
fi
|
|
|
|
# This needs to run in background
|
|
# Will prepopulate entries after ldap daemon has started
|
|
./prepopulate.sh &
|
|
|
|
chown -R openldap:openldap /etc/ldap/slapd.d/ /var/lib/ldap/ /var/run/slapd/
|
|
else
|
|
slapd_configs_in_env=`env | grep 'SLAPD_'`
|
|
|
|
if [ -n "${slapd_configs_in_env:+x}" ]; then
|
|
echo "Info: Container already configured, therefore ignoring SLAPD_xxx environment variables"
|
|
fi
|
|
fi
|
|
|
|
exec "$@"
|
|
|