Docker Compose Configuration - Book Samples, Chapter 5

Last modified 01 Oct 2024 17:08 +02:00

This is a docker compose configuration following the configuration used in midPoint book.

Use the book-example.sh script to set up and start the environment:

  • book-example.sh start starts the containers up. It also initializes the environment (midPoint home directory) before first start.

  • book-example.sh reset resets everything to initial state. All data will be lost.

Steps To Proceed

The initial state corresponds roughly to the beginning of chapter 5 (Synchronization) of the book. However, the resources are pre-configured for later chapters (e.g. job codes, org units)

Following steps can be used to proceed to state for later chapters:

  1. Start/resume LDAP Reconciliation task.

  2. Navigate to LDAP accounts, manually correlate unmatched accounts (fox → 006, irvine → 009, violet → 022). Some accounts are left unmatched (john, oscar).

  3. Activate LDAP inbound mapping uid → name.

  4. Activate delete reaction for unmatched situation.

  5. Run LDAP Reconciliation task again.

  6. Check that users have human-friendly usernames. Unmatched LDAP accounts should be gone. We are roughly at the state that corresponds to the end of chapter 5 (Synchronization).

  7. Disable LDAP inbound mapping uid → name.

  8. Disable empno → name inbound mapping in HR resource, to make sure HR is not going to ruin our usernames.

  9. There is no need to do anything for Chapter 6 (Schema), schema extensions are already in the container.

  10. There is no need to do anything for Chapter 7 (RBAC), the roles are already imported in midPoint.

  11. There is no need to do anything for Chapter 8 (Archetypes), the chapter deals with initial objects only.

  12. Change fullName mapping in Person object template to active.

  13. Change autoassign-jobcode mapping for assignment in Person object template to active.

  14. Activate role autoassignment in system configuration.

  15. Recompute all users. Run Recompute users task.

Structure

Subdirectories:

  • init has initial configuration used by the containers.

    • midpoint initial configuration for midPoint (post-initial objects, schema, CSV resources)

    • ldap initial configuration for OpenLDAP (schema, config and basic entries)

    • postgres initial configuration for PostgreSQL (DB schema for database resources CRM and Portal)

  • midpoint_home is midPoint home directory, used by midPoint container. It is created by the book-example.sh script, to make sure it has correct owenership and permissions. It is then populated by midPoint container at first start. It is writable, you can modify the resource CSV files and copy connector JARs here.

Was this page helpful?
YES NO
Thanks for your feedback