feat(ldap): add support unencrypted connection to LDAP server (#9)

Dockerfile

@@ -140,6 +140,7 @@ ENV CN_SECRET_ADAPTER=vault \
 ENV CN_PERSISTENCE_TYPE=ldap \
     CN_PERSISTENCE_LDAP_MAPPING=default \
     CN_LDAP_URL=localhost:1636 \
+    CN_LDAP_USE_SSL=true \
     CN_COUCHBASE_URL=localhost \
     CN_COUCHBASE_USER=admin \
     CN_COUCHBASE_CERT_FILE=/etc/certs/couchbase.crt \

README.md

@@ -51,6 +51,7 @@ The following environment variables are supported by the container:
 - `CN_PERSISTENCE_TYPE`: Persistence backend being used (one of `ldap`, `couchbase`, or `hybrid`; default to `ldap`).
 - `CN_PERSISTENCE_LDAP_MAPPING`: Specify data that should be saved in LDAP (one of `default`, `user`, `cache`, `site`, `token`, or `session`; default to `default`). Note this environment only takes effect when `CN_PERSISTENCE_TYPE` is set to `hybrid`.
 - `CN_LDAP_URL`: Address and port of LDAP server (default to `localhost:1636`); required if `CN_PERSISTENCE_TYPE` is set to `ldap` or `hybrid`.
+- `CN_LDAP_USE_SSL`: Whether to use SSL connection to LDAP server (default to `true`).
 - `CN_COUCHBASE_URL`: Address of Couchbase server (default to `localhost`); required if `CN_PERSISTENCE_TYPE` is set to `couchbase` or `hybrid`.
 - `CN_COUCHBASE_USER`: Username of Couchbase server (default to `admin`); required if `CN_PERSISTENCE_TYPE` is set to `couchbase` or `hybrid`.
 - `CN_COUCHBASE_CERT_FILE`: Couchbase root certificate location (default to `/etc/certs/couchbase.crt`); required if `CN_PERSISTENCE_TYPE` is set to `couchbase` or `hybrid`.

conf/jans-ldap.properties.tmpl

@@ -2,7 +2,7 @@ bindDN: %(ldap_binddn)s
 bindPassword: %(encoded_ox_ldap_pw)s
 servers: %(ldap_hostname)s:%(ldaps_port)s
 
-useSSL: true
+useSSL: %(ssl_enabled)s
 ssl.trustStoreFile: %(ldapTrustStoreFn)s
 ssl.trustStorePin: %(encoded_ldapTrustStorePass)s
 ssl.trustStoreFormat: pkcs12

requirements.txt

@@ -1 +1 @@
--e git+https://github.com/JanssenProject/jans-pycloudlib@928df25dce449f8dcfdb0cae30ef8777b361c314#egg=jans-pycloudlib
+-e git+https://github.com/JanssenProject/jans-pycloudlib@3a7dfc294f3a41c8cca3deafa13fd0afb3f4834d#egg=jans-pycloudlib