LemonLDAP-NG in Podman

Howto
, ,
64

Tested and works fine

65

I just did a search and can’t find any reference to the env I’ve opened a ticket on LemonLDAP-NG support about here I just found a reference here

So my understanding is we should change it to this

-env PRESERVEFILES="/etc/lemonldap-ng /var/lib/lemonldap-ng/conf /var/lib/lemonldap-ng/sessions /var/lib/lemonldap-ng/psessions /usr/share/lemonldap-ng /etc/nginx/sites-enabled /usr/share/perl5/Lemonldap/NG/Portal/Plugins /usr/share/perl5/Lemonldap/NG/Portal/Register" \

I’ve sent a pull request regarding the changes.

Next I’ll look into getting the LemonLDAP-NG cli operational for more automation and the ability to have automated scripts

Never mind I just realised you have that working for SMTP etc so automation scripting should be possible already

2 Likes
66

Can you show us a howto on saml with lemonldap 
 i am curious

Thank for tested it
i think we are close to release the stable

2 Likes
67

The how to that was setup by danb and myself (but mostly him) works fine I tested zammad userguide:llng [NethServer & NethSecurity]

2 Likes
68

I think the steps for automation should be:
to have a toggle in Nethserver UI to set

  • the cross domain cookie.
  • saml activation
  • basic setup of saml apps (i.e., nextcloud, zammad, zabbix, wordpress etc)*

For saml apps we could have the toggle setup the exported variables, set security settings (to sign assertion etc) and live the metadata blank.

/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 \ set \ cda '1' works to set cross domain cookie to on

/usr/share/lemonldap-ng/bin/lemonldap-ng-cli -yes 1 \ addKey \ samlSPMetaDataXML/testsp samlSPMetaDataXML "`cat metadata-testsp.xml`" \ samlSPMetaDataExportedAttributes/testsp mail '1;EmailAddress'

adds blank saml application with name testsp and adds mail - EmailAddress as Exported variables

1 Like
69

Merged. Thanks a lot

1 Like
70

No problem

71

the works are going well, @Shane_Treweek and I are working on saml implementation to make things automatic

nice team work :heart:

3 Likes
72

wonderful news. ANyone with i. deas how NS7 configs for LLNG can be exported and imported into this one for NS7 and is it workable

1 Like
73

shouldn’t be too difficult just need to write a script to convert the json from centos compatible to Debian then use the script on the json from ns7 and use the converted json in the ns8 version

74

we’ve got everything working that we had in ns7 just working on refining it and making the options (i.e., activate saml) available directly in the ns8 app settings it’s already at the stage that I can replace my ns7 version with it and while there’s a few minor things (mainly just tying things up and making it really easy to enable things directly in the ns8 interface as apposed to the endless settings in LemonLDAP-NG manager) it very close to being a rc (in my opinion anyway)

3 Likes
75

@stephdl did you manage to Make the Bug Report?

Coudot images here coudot/lemonldap-ng - Docker Image | Docker Hub
Have stopped releasing any newer versions beyond **2.20.2 released 8 Months Ago.
**
All newer versions, seems to be pushed to org in: lemonldapng/lemonldap-ng Tags | Docker Hub
still made by Coudot.

I tried Updating to the new release to test here: GitHub - geniusdynamics/ns8-lemonldapng at dev

While everything seem to work, Logging in does not work, is that the issue you faced ealier.
interestingly, inputing wrong credentials will tell you its wrong.

As I posted on the release App here:

The official Docker image has been improved, to ease customization and volumes management. See Docker Hub and documentation

These are all the changes Made:
History for Dockerfile - LemonLDAPNG/lemonldap-ng-docker

76

no I do not recall exactly, but I think that for sure it was not workable with the same settings as before. each update and mostly when you change the source needs works to make it .