OpenLDAP server for Galaxy testing

Based on: https://github.com/osixia/docker-openldap

Use this image to test your ldap configuration.

docker run --name my-openldap-container --detach -p 389:389 -p 636:636 jelle/galaxy-openldap

By default, the following users are available:

• dn: uid=galaxy,dc=example,dc=org password: galaxy
• dn: uid=dummy,dc=example,dc=org password: dummy

Ldapsearch

Examples:

ldapsearch -x -H ldap://localhost -b dc=example,dc=org -D "cn=admin,dc=example,dc=org" -w admin -x uid=galaxy

Same but from the container: docker exec my-openldap-container ldapsearch -x -H ldap://localhost -b dc=example,dc=org -D "cn=admin,dc=example,dc=org" -w admin -x uid=galaxy

Docker-compose

With docker-compose up you get a phpLDAPadmin page at http://localhost:8080 to which you can login with cn=admin,dc=example,dc=org as username and admin as password.

Galaxy

Relevant galaxy configuration in config/auth_conf.xml:

<authenticator>
  <type>ldap</type>
  <options>
    (..)
    <server>ldap://localhost</server>
    <ldap-options>OPT_X_TLS_REQUIRE_CERT=OPT_X_TLS_NEVER</ldap-options>
    <login-use-username>True</login-use-username>
    <continue-on-failure>False</continue-on-failure>
    <!-- For OpenLDAP: -->
    <search-base>dc=example,dc=org</search-base>
    <search-fields>uid,mail</search-fields>
    <search-filter>(mail={email})</search-filter>
    <search-filter>(uid={username})</search-filter>
    <bind-user>{dn}</bind-user>
    <bind-password>{password}</bind-password>
    <auto-register-username>{uid}</auto-register-username>
    <auto-register-email>{mail}</auto-register-email>
    <search-user>cn=admin,dc=example,dc=org</search-user>
    <search-password>admin</search-password>
    <auto-create-roles>True</auto-create-roles>
    <auto-create-groups>True</auto-create-groups>
    <auto-assign-roles-to-groups-only>True</auto-assign-roles-to-groups-only>
    <auto-register-roles>gidNumber</auto-register-roles>
  </options>
</authenticator>