✨ Adds MariaDB image with direct LDAP PAM authentication

- Introduced a new Containerfile to build a MariaDB image with direct LDAP PAM support.
- Implemented a custom PAM module (`pam_ldap_direct.so`) built from the PADL source to avoid dependencies on `libpam-ldap` and `nslcd`.
- Updated the entrypoint script to dynamically generate the PAM configuration file (`/etc/pam_ldap.conf`) based on environment variables.
- Added a README.md to document the image usage, configuration, and build process.
- Created a test suite to validate the image build and entrypoint behavior, ensuring proper handling of environment variables and configuration generation.
- Configured health checks and ensured the stock MariaDB entrypoint and lifecycle are preserved.
This commit is contained in:
akritikos committed 2026-10-09 14:13:03 +03:00
1 parent a4fc4e2ae2
commit f5a5204b75
11 files changed
+519 -282

No files matched your search

+1 -1
View File
@@ -17,7 +17,7 @@ certificate's PEM or private key in place, so each renewal receives a new ID.
2. If no matching record exists, import one with a temporary name ending in
`_pending_<16-character full-chain hash>`.
3. Select its ID for the UI and request a UI restart when needed. Connect directly
to HTTPS and require an exact match against the expected leaf certificate.
to HTTPS and require an exact match against the expected leaf certifi4scate.
4. Confirm the selected UI certificate ID, then delete superseded managed records
using non-forced deletion jobs. TrueNAS checks service dependencies and refuses
deletion of certificates still referenced by services.