Docker部署LDAP自助密码服务self-service-password

最新推荐文章于 2026-07-12 16:16:00 发布

原创

最新推荐文章于 2026-07-12 16:16:00 发布 · 4.1k 阅读

公网环境

使用现成的docker镜像

创建数据目录

mkdir -pv /data/openldap/self-service-password/{htdocs,logs}
mkdir /data/docker-compose/openldap/ssp/

docker-compose文件

cat > /data/docker-compose/openldap/ssp/docker-compose.yml << EOF
version: "3"
services:
  self-service-password:
    container_name: self-service-password
    image: tiredofit/self-service-password:latest
    restart: always
    ports:
      - 8096:80
    environment:
      - LDAP_SERVER=ldap://192.168.2.101:389
      - LDAP_BINDDN=cn=admin,dc=git,dc=com,dc=cn
      - LDAP_BINDPASS=G1T@Ldap
      - LDAP_BASE_SEARCH=ou=People,dc=git,dc=com,dc=cn
      - MAIL_FROM=xxxxxx@sina.com
      - SMTP_DEBUG=0
      - SMTP_HOST=smtp.sina.com
      - SMTP_USER=xxxxxx@sina.com
      - SMTP_PASS=xxxxxx
      - SMTP_PORT=465
      - SMTP_SECURE_TYPE=ssl
      - SMTP_AUTH_ON=true
    volumes:
      - /etc/localtime:/etc/localtime
      - /data/openldap/self-service-password/htdocs:/www/ssp
      - /data/openldap/self-service-password/logs:/www/logs
    networks:
      - openldap
    deploy:
      resources:
        limits:
           memory: 2G
        reservations:
           memory: 512M
EOF

启动self-service-password

docker-compose up -d

内网环境

上面的docker镜像十分好用,但是内网环境下无法启动,所以就自己构建个镜像

创建数据目录

mkdir -pv /data/openldap/self-service-password/conf
chmod o+x /data/openldap/self-service-password/conf -R
mkdir -pv /data/docker-compose/openldap/ssp/

构建docker镜像

安装包下载

https://ltb-project.org/download

下载rpm格式安装包,放入dockerfile同级目录

Dockerfile

FROM centos:7
RUN rpm -Uvh https://mirror.webtatic.com/yum/el7/epel-release.rpm && \
    rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm && \
    yum clean all &&  yum makecache
RUN yum install -y httpd php70w.x86_64 php70w-cli.x86_64 php70w-common.x86_64 php70w-gd.x86_64 \
                   php70w-ldap.x86_64 php70w-mbstring.x86_64 php70w-mcrypt.x86_64 \
                   php70w-mysql.x86_64 php70w-pdo.x86_64 php-Smarty --nogpgcheck

COPY self-service-password-1.4.3-1.el7.noarch.rpm /home/
RUN yum localinstall -y /home/self-service-password-1.4.3-1.el7.noarch.rpm
ADD self-service-password.conf /etc/httpd/conf.d/

USER root
WORKDIR /usr/share/self-service-password
VOLUME /usr/share/self-service-password
EXPOSE 80

ENTRYPOINT ["/usr/sbin/httpd"]
CMD ["-D","FOREGROUND"]

httpd配置文件

其实就是把默认ssp域名修改成localhost

self-service-password.conf

<VirtualHost *:80>
        ServerName localhost

        DocumentRoot /usr/share/self-service-password/htdocs
        DirectoryIndex index.php

        AddDefaultCharset UTF-8

        <Directory /usr/share/self-service-password/htdocs>
            AllowOverride None
            <IfVersion >= 2.3>
                Require all granted
            </IfVersion>
            <IfVersion < 2.3>
                Order Deny,Allow
                Allow from all
            </IfVersion>
        </Directory>

        Alias /rest /usr/share/self-service-password/res

标签