Compare commits

..

3 commits

Author SHA1 Message Date
c7bf603ce1 Add smtpd.conf
All checks were successful
ci/woodpecker/push/woodpecker/1 Pipeline was successful
ci/woodpecker/push/woodpecker/2 Pipeline was successful
2025-07-18 21:46:47 +02:00
bf8c1c3b8c The right variable is ldap_tls_cacert_file 2025-07-18 21:46:07 +02:00
10caa6e8ba Add ca-certificates 2025-07-18 21:46:01 +02:00
3 changed files with 5 additions and 4 deletions

View file

@ -3,6 +3,7 @@ FROM debian:stable-slim
ENTRYPOINT ["/docker-entrypoint.sh"] ENTRYPOINT ["/docker-entrypoint.sh"]
CMD ["/usr/sbin/saslauthd", "-d", "-a", "ldap", "-O", "/etc/sasl2/saslauthd.conf"] CMD ["/usr/sbin/saslauthd", "-d", "-a", "ldap", "-O", "/etc/sasl2/saslauthd.conf"]
COPY smtpd.conf /etc/sasl2/smtpd.conf
COPY entrypoint.sh /docker-entrypoint.sh COPY entrypoint.sh /docker-entrypoint.sh
RUN apt update && DEBIAN_FRONTEND=noninteractive apt install -y sasl2-bin libsasl2-modules-ldap && rm -rf /var/lib/apt/lists/* RUN apt update && DEBIAN_FRONTEND=noninteractive apt install -y ca-certificates sasl2-bin libsasl2-modules-ldap && rm -rf /var/lib/apt/lists/*

View file

@ -1,7 +1,5 @@
#!/bin/sh #!/bin/sh
mkdir -p /etc/sasl2/
cat <<EOF > /etc/sasl2/saslauthd.conf cat <<EOF > /etc/sasl2/saslauthd.conf
ldap_servers: ${LDAP_SERVERS} ldap_servers: ${LDAP_SERVERS}
ldap_search_base: ${LDAP_SEARCH_BASE} ldap_search_base: ${LDAP_SEARCH_BASE}
@ -12,7 +10,7 @@ ldap_bind_pw: ${LDAP_BIND_PW}
ldap_auth_method: ${LDAP_AUTH_METHOD:-bind} ldap_auth_method: ${LDAP_AUTH_METHOD:-bind}
ldap_deref: ${LDAP_DEREF:-find} ldap_deref: ${LDAP_DEREF:-find}
ldap_ssl: ${LDAP_SSL:-on} ldap_ssl: ${LDAP_SSL:-on}
ldap_tls_cacert_dir: ${LDAP_TLS_CACERT_DIR:-/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt} ldap_tls_cacert_file: ${LDAP_TLS_CACERT_FILE:-/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt}
ldap_group_attr: ${LDAP_GROUP_ATTR:-member} ldap_group_attr: ${LDAP_GROUP_ATTR:-member}
ldap_group_dn: ${LDAP_GROUP_DN} ldap_group_dn: ${LDAP_GROUP_DN}

2
smtpd.conf Normal file
View file

@ -0,0 +1,2 @@
pwcheck_method:saslauthd
mech_list: PLAIN LOGIN