✨ Commits existing images to git

- Implemented sync-roles.sh to synchronize Active Directory group memberships as MariaDB roles and user accounts.
- Created Containerfile for building a custom ldap2pg image with patched YAML decoding.
- Added provision-user-db.sh for provisioning user databases and roles based on LDAP synchronization.
- Introduced a new Containerfile for MariaDB with PAM authentication via pam_ldap.
- Configured PAM service for MariaDB logins and added necessary plugins for LDAP authentication.
- Implemented health checks and entrypoint scripts for MariaDB and pgpool containers.
- Enhanced PostgreSQL image with additional extensions and custom pg_hba.conf for improved security and functionality.
This commit is contained in:
akritikos committed 2026-08-15 19:57:25 +03:00
commit 5744f4b7db
20 files changed
+1023

No files matched your search

+11
View File
@@ -0,0 +1,11 @@
# Image-owned plugin preload (analogue of the postgres image's
# shared_preload_libraries in 10-extensions.conf). auth_pam provides Active
# Directory logins via PAM -> pam_ldap.
[mariadb]
plugin_load_add = auth_pam
# Make auth_pam use the mysql_clear_password protocol instead of the interactive
# "dialog" one. Required for MaxScale: its clear_pw_passthrough only speaks
# mysql_native_password / mysql_clear_password to backends, never dialog. The
# password is sent in cleartext, so TLS must be on (99-tls.cnf) — it is.
pam_use_cleartext_plugin = 1