Hello:
The ldap deployed by my docker can now log in with account and password. How to log in to ldap by email? I deployed tls authentication, how do I log in to ldap by email?
My deployment reference document: https://github.com/osixia/docker-openldap#tls
--
HaoDongZ Beijing Dongcheng District
--On Thursday, October 29, 2020 12:39 PM +0800 HaoDongZ haodongz@yeah.net wrote:
The ldap deployed by my docker can now log in with account and password. How to log in to ldap by email? I deployed tls authentication, how do I log in to ldap by email?
This has nothing to do with docker.
And by "log in", log into what, exactly?
If you mean how to bind to the LDAP server using an email address, you would need to enable SASL/EXTERNAL (cert) authentication (vs simple binds which use the LDAP user DN + password), and then issue user certs that the end user authenticates with against the LDAP server, with an appropriate authz-regexp mapping. However, I suspect this isn't really what you're after.
You'll need to describe exactly what you're hoping to accomplish in greater detail if you would like assistance.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
hi ：The following title is my configuration method
1. docker run -d --name ldap -p 389:389 -p 636:636 -v /usr/local/ldap:/usr/local/ldap --env LDAP_TLS_VERIFY_CLIENT=try --env LDAP_ORGANISATION="redcore" --env LDAP_DOMAIN="redcore.cn" osixia/openldap 2. docker run -d -p 80:80 --link ldap --restart=always --name phpldapadmin --env PHPLDAPADMIN_HTTPS=false --env PHPLDAPADMIN_LDAP_HOSTS=ldap --restart always --detach osixia/phpldapadmin
How do i make my email address as login id in LDAP?
--
HaoDongZ Beijing Dongcheng District
At 2020-10-30 05:22:23, "Quanah Gibson-Mount" quanah@symas.com wrote:
--On Thursday, October 29, 2020 12:39 PM +0800 HaoDongZ haodongz@yeah.net wrote:
The ldap deployed by my docker can now log in with account and password. How to log in to ldap by email? I deployed tls authentication, how do I log in to ldap by email?
This has nothing to do with docker.
And by "log in", log into what, exactly?
If you mean how to bind to the LDAP server using an email address, you would need to enable SASL/EXTERNAL (cert) authentication (vs simple binds which use the LDAP user DN + password), and then issue user certs that the end user authenticates with against the LDAP server, with an appropriate authz-regexp mapping. However, I suspect this isn't really what you're after.
You'll need to describe exactly what you're hoping to accomplish in greater detail if you would like assistance.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
--On Friday, October 30, 2020 10:15 AM +0800 HaoDongZ haodongz@yeah.net wrote:
How do i make my email address as login id in LDAP?
You can't. What you can do is write a utilty that queries the ldap server on behalf a user, finds their DN based on their email address, and then uses their DN to authenticate them.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
openldap-technical@openldap.org
-
HaoDongZ -
Quanah Gibson-Mount