Problem: connect to LDAP/LDAPS from Docker

[akupreev]

Issue

Colleagues, good afternoon.
I encountered a problem enabling LDAP/LDAPS authorization in semaphore.
Semaphore is deployed in docker-container using docker-compose, when deployed, the config.json configuration is not pulled from the compose.yml file, namely, the configuration from the SEMAPHORE_LDAP_MAPPING_* values ​​is not pulled up.
Configuration example:

SEMAPHORE_LDAP_ACTIVATED: "yes"
SEMAPHORE_LDAP_HOST: "example.com"
SEMAPHORE_LDAP_PORT: "636"
SEMAPHORE_LDAP_DN_BIND: "cn=test,ou=service,ou=Accounts,ou=Organization,dc=example,dc=com"
SEMAPHORE_LDAP_PASSWORD: "secret-password"
SEMAPHORE_LDAP_DN_SEARCH: "dc=example,dc=com"
SEMAPHORE_LDAP_NEEDTLS: "yes"
SEMAPHORE_LDAP_SEARCH_FILTER: "(&(sAMAccountName=%s)(memberOf=ou=Users,ou=Organization,dc=example,dc=com))"
SEMAPHORE_LDAP_MAPPING_DN: "dn"
SEMAPHORE_LDAP_MAPPING_MAIL: "{{userPrincipalName}}@example.com"
SEMAPHORE_LDAP_MAPPING_UID: "sAMAccountName"
SEMAPHORE_LDAP_MAPPING_CN: "cn"

Tell me please where I made a mistake?

Impact

Docker

Installation method

Docker

Database

Postgres

Browser

Chrome

Semaphore Version

2.9.112

Ansible Version

No response

Logs & errors

No response

Manual installation - system information

No response

Configuration

No response

Additional information

No response

[fiftin]

We have examples how to config LDAP:

https://github.com/semaphoreui/semaphore/tree/develop/examples/openldap

[akupreev]

Good afternoon.
Do I understand correctly that the variables below are not required?

SEMAPHORE_LDAP_MAPPING_DN: "dn"
SEMAPHORE_LDAP_MAPPING_MAIL: "{{userPrincipalName}}@example.com"
SEMAPHORE_LDAP_MAPPING_UID: "sAMAccountName"
SEMAPHORE_LDAP_MAPPING_CN: "cn"

Also, please clarify, do I understand correctly that semaphore only works with OpenLdap, and connecting to Microsoft Active Directory is impossible?

[tboerger]

Active directory should also work, but it's simply not tested automatically. AFAIK there are people in the community using it with an AD.

[MadsMMP]

Did you find a solution? Currently have similar problem. I do not get any logs to why LDAP isnt working.

Also using Docker Compose

[akupreev]

@MadsMMP Hello my friend. At the moment, I have not found a suitable solution to make the LDAP Semaphore with AD connection work.

[MadsMMP]

I have found a solution!

The docker-compse.yml configuration doesn't match the original config.json which it meant to be used.

Therfore u need to create a config.json and make it use that instead of the arguments in the compose file.

Please tell me if you need more depth explanation