✨ Adds MariaDB image with direct LDAP PAM authentication

- Introduced a new Containerfile to build a MariaDB image with direct LDAP PAM support.
- Implemented a custom PAM module (`pam_ldap_direct.so`) built from the PADL source to avoid dependencies on `libpam-ldap` and `nslcd`.
- Updated the entrypoint script to dynamically generate the PAM configuration file (`/etc/pam_ldap.conf`) based on environment variables.
- Added a README.md to document the image usage, configuration, and build process.
- Created a test suite to validate the image build and entrypoint behavior, ensuring proper handling of environment variables and configuration generation.
- Configured health checks and ensured the stock MariaDB entrypoint and lifecycle are preserved.
This commit is contained in:
akritikos committed 2026-10-09 14:13:03 +03:00
1 parent a4fc4e2ae2
commit f5a5204b75
11 files changed
+519 -282

No files matched your search

+2 -6
View File
@@ -1,6 +1,2 @@
# PAM service for MariaDB auth_pam logins (accounts created IDENTIFIED VIA pam
# USING 'mariadb'). Authenticate + authorize against Active Directory through
# the daemonless pam_ldap module; its connection settings live in
# /etc/pam_ldap.conf, rendered at container start from the environment.
auth required pam_ldap.so
account required pam_ldap.so
auth required /usr/local/lib/security/pam_ldap_direct.so
account required /usr/local/lib/security/pam_ldap_direct.so