Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Empty subschema (sub)entry #379

Open
yyrliu opened this issue Dec 23, 2023 · 0 comments
Open

Empty subschema (sub)entry #379

yyrliu opened this issue Dec 23, 2023 · 0 comments

Comments

@yyrliu
Copy link

yyrliu commented Dec 23, 2023

The issue

I'm trying to use ldap-ui as the frontend for glauth, which requires Subschema Discovery to generate the schema attributes. However, the query returned an empty schema. The documentation said that the entries in schema/ directory are returned, however, schema/ does not exist in glauth/glauth-plugins image. Probing with ldapsearch gave the following result:

~$ ldapsearch -LLL -o ldif-wrap=no -H ldap://localhost:389 -D cn=serviceuser,dc=glauth,dc=com -w mysecret -x -b "cn=schema"
dn: cn=schema
cn: schema
hasSubordinates: false
modifiersName: cn=Directory Manager
modifyTimeStamp: Mar 8, 2021, 12:46:29 PM PST (20210308204629Z)
objectclass: *

My setup

Docker with glauth/glauth-plugins image and default config/file.

docker-compose.yml

version: "3"
services:
  glauth:
    image: glauth/glauth-plugins
    container_name: glauth
    volumes:
      - ~/glauth/config/config.cfg:/app/config/config.cfg
    ports:
      - 389:389
    restart: unless-stopped

  ldap-ui:
    image: dnknth/ldap-ui
    container_name: ldap-ui
    environment:
      LDAP_URL: "ldap://glauth/"
      BASE_DN: "dc=glauth,dc=com"
      BIND_PATTERN: "cn=%s,ou=svcaccts,dc=glauth,dc=com"
      LOGIN_ATTR: "cn"
      restart: unless-stopped

settings.py of ldap-ui is slightly modified

USE_TLS = bool(os.environ.get('USE_TLS', LDAP_URL.startswith('ldaps://')))
INSECURE_TLS = bool(os.environ.get('INSECURE_TLS', False))

-SCHEMA_DN = 'cn=subschema'
+SCHEMA_DN = 'cn=schema'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant