OpenLDAP/BackSQL

SQL Schema

cat << DDL | psql -U ${USER}
CREATE DATABASE openldap;
CREATE USER openldap WITH ENCRYPTED PASSWORD 'sadaqah!';
GRANT ALL PRIVILEGES ON DATABASE openldap TO openldap;
ALTER DATABASE openldap OWNER TO openldap;
DDL

SQL Backend

lxc launch ubuntu:24.04 openldap lxc list -c=n -f=json|jq -r '.[]|select(.name=="openldap")|.status'
# install `psql` & `odbc` driver cat <<'EXE' | lxc exec openldap -- bash apt-get update apt-get install -y postgresql-client odbc-postgresql apt-get clean EXE
# extract lxd bridge network ip using `ip address show` command LXD_BRIDGE_IP="$(ip addr show lxdbr0 | awk '/inet / {print $2}' | cut -d '/' -f 1)" cat << EXE | lxc exec openldap -- bash echo "${LXD_BRIDGE_IP} host.lxd.internal"|tee -a /etc/hosts ping -c5 host.lxd.internal EXE
# psql connect test lxc exec openldap -- bash echo -n 'password: ';read -s PGPASSWORD;export PGPASSWORD;echo # password: sadaqah! psql -d openldap -U openldap -h host.lxd.internal
# `PostgreSQL` odbc driver config cat <<'EXE' | lxc exec openldap -- bash cat <<'INI' | tee -a /etc/odbcinst.ini >/dev/null [PostgreSQL] Description = ODBC for PostgreSQL Driver = /usr/lib/x86_64-linux-gnu/odbc/psqlodbcw.so Setup = /usr/lib/x86_64-linux-gnu/odbc/libodbcpsqlS.so INI cat /etc/odbcinst.ini EXE
# `ldap` odbc datasource config cat <<'EXE' | lxc exec openldap -- bash cat <<'INI' | tee -a /etc/odbc.ini >/dev/null [ldap] Description = OpenLDAP PostgreSQL DB Servername = host.lxd.internal Driver = PostgreSQL Database = openldap Username = openldap Password = sadaqah! Port = 5432 INI cat /etc/odbc.ini EXE
lxc snapshot openldap base:2.6.7	lxc publish openldap/base:2.6.7 --alias openldap/base:2.6.7	lxc restore openldap base:2.6.7
# install `slapd` and `ldap-utils` cat <<'EXE' | lxc exec openldap -- bash apt-get update echo 'slapd slapd/password1 password sadaqah!' | debconf-set-selections echo 'slapd slapd/password2 password sadaqah!' | debconf-set-selections DEBIAN_FRONTEND=noninteractive apt-get install -y slapd ldap-utils ls -lah /usr/lib/ldap | grep back_sql apt-get clean EXE
# checking ldap `back-sql` module cat <<'EXE' | lxc exec openldap -- bash ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=module{0},cn=config printf '\n=============================================================\n' ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=module{0},cn=config | grep -i back_sql EXE
# sql backend module load cat <<'EXE' | lxc exec openldap -- bash BACK_SQL_INI=$(mktemp -u) cat <<'INI' | tee ${BACK_SQL_INI} >/dev/null dn: cn=module{0},cn=config changetype: modify add: olcModuleLoad olcModuleLoad: back_sql.la INI ldapadd -Y EXTERNAL -H ldapi:/// -f ${BACK_SQL_INI} EXE
# admin password added using `slappasswd` # slappasswd -h {SSHA} -s sadaqah! cat <<'EXE' | lxc exec openldap -- bash ADMIN_PASS_INI=$(mktemp -u) cat <<'INI' | tee ${ADMIN_PASS_INI} >/dev/null dn: olcDatabase={0}config,cn=config changetype: modify replace: olcRootPW olcRootPW: {SSHA}Pg5ICKylRb08GzjwP9/M7gi8SQ8re9BA INI ldapmodify -Y EXTERNAL -H ldapi:/// -f ${ADMIN_PASS_INI} EXE
lxc snapshot openldap ldap:2.6.7	lxc publish openldap/slapd:2.6.7 --alias openldap/ldap:2.6.7	lxc restore openldap ldap:2.6.7

Playground

lxc image info ubuntu:noble --vm|yq .Aliases lxc image info ubuntu:24.04 --vm|yq .Aliases lxc image info ubuntu:noble |yq .Aliases lxc image info ubuntu:24.04 |yq .Aliases	lxc image list ubuntu: os=ubuntu release=noble type=virtual-machine lxc image list ubuntu: os=ubuntu release=noble type=virtual-machine lxc image list ubuntu: os=ubuntu release=noble type=container lxc image list ubuntu: os=ubuntu release=noble type=container
lxc image list ubuntu:24.04 lxc launch ubuntu:24.04 openldap lxc launch ubuntu:40d8df642812 openldap	lxc list status=running name=openldap --format=json |jq -r '.[].state.network.[].addresses' lxc list status=running name=openldap --format=yaml |yq -r '.[].state.network.[].addresses' lxc info openldap|yq '.Resources.["Network usage"][]["IP addresses"].inet'
systemctl list-dependencies graphical.target dpkg -l | grep 'gnome-shell-extension' apt list --installed|grep linux-image	lxc snapshot openldap base:2.6.7 lxc publish openldap/base:2.6.7 --alias openldap/base:2.6.7 lxc restore openldap base:2.6.7
cat <<-'EXE'|sudo bash umount /var/snap/firefox/common/host-hunspell snap remove firefox EXE	cat <<-'EXE'|sudo bash snap disable lxd snap remove --purge lxd EXE	systemctl list-dependencies --type=service --state=running systemctl list-dependencies --type=service --state=active systemctl list-dependencies docker.service systemctl list-dependencies --all
LXD_BRIDGE_IP="$(lxc network ls --format=json|jq -r '.[]|select(.name=="lxdbr0")|.config."ipv4.address"|split("/")[0]')" LXD_BRIDGE_IP="$(ip addr show lxdbr0 | awk '/inet / {print $2}' | cut -d '/' -f 1)"

References

LDAP » OID » Chorke, Org » Request LDAP » OID » Shahed, Inc » Request LDAP » OID » Chorke, Inc » Request LDAP » OID » Chorke, Org » 61820 LDAP » OID » Shahed, Inc » 61752 LDAP » OID » Chorke, Inc » 62865 LDAP » Schema Specification LDAP » Back SQL » Config LDAP » Back SQL LDAP » Config	LDAP » Manage & Use with OpenLDAP Utilities LDAP » Internet Assigned Numbers Authority LDAP » Build Docker Image from Ubuntu LDAP » 2.5.17 LTS Release Changes LDAP » MySQL Store & Fetch Data LDAP » Administrator's Guide LDAP » Clone phpLDAPadmin LDAP » Download
Ubuntu/Raspberry Pi Ubuntu Upgrade ActiveMQ Minikube Keycloak Hadoop Jenkins WildFly Spark MinIO	Alpine/Morefine Ruby on Rails TensorFlow Homebrew Linuxbrew PyEnv TMux 7Zip Zip Tar	Linux Service Creation Bash/Port/Forward Linux Mount Drive YouTube/Channel Bash/Network Bash/RAM Bash/CPU Bash/Port Bash Port
Private Enterprise Number Linux User Creation Linux Containers PostgreSQL IPTables MySQL CIDR UFW YQ JQ	Cloud Computing Cost Helm » PostgreSQL Helm » MariaDB Benchmarks Helm