Files
computer-playbook/roles/web-app-phpldapadmin/README.md
T
kevinveenbirkenbachandClaude Opus 5 7bc12e55f3 fix(docs): drop the generated sections the designer merge put back
aceb5295ef moved Cosmos, Quick Setup and Credits out of the committed role
READMEs and into the documentation build's own scratch checkout, so a
committed copy can no longer go stale when the metadata moves. Merging
feature/designer (ebad39422c) took origin/main's side of those files, which
still carries them, and reinstated all 290 along with the cosmos make target
and its i8cos alias. tests/lint/ansible/roles/test_readme.py hard-fails on a
committed copy, and the reinstated Credits block credited one person with two
URLs, which tripped the credits-attribution lint as well.

Stripped with the repository's own fence-aware parser against
MANAGED_SECTIONS, not with a line filter: the Cosmos block holds a mermaid
fence a naive filter would cut through. The result is byte-identical to
aceb5295ef for every README that carries no prose change since.

The cosmos target wrote the forbidden section straight back into the
checkout, so it goes with them.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-10-06 01:50:43 +02:00

2.5 KiB
Raw Blame History

phpldapadmin

End of life. Infinito.Nexus neither maintains nor tests this role, and the default INFINITO_LIFECYCLES envelope keeps it out of every CI round. Deploy it at your own risk and take support from phpLDAPadmin.

Description

phpLDAPadmin is a web‑based LDAP client that provides an intuitive interface for managing LDAP directories. This containerized deployment leverages Docker Compose and Ansible automation to offer a secure, configurable environment for administering and exploring your LDAP configurations.

Overview

This deployment simplifies LDAP management by presenting a modern web interface that lets you search, modify, and manage directory entries easily. It supports integration with external LDAP servers and works seamlessly behind a reverse proxy, allowing administrators to focus on core directory tasks rather than deployment intricacies.

Features

  • Web‑Based LDAP Management:
    Enjoy an intuitive and responsive interface to browse and administer your LDAP directories.

  • Secure Reverse Proxy Setup:
    Easily configure your access through a reverse proxy to ensure secure, controlled entry to your LDAP management tool.

  • Docker Compose Integration:
    Benefit from a streamlined, containerized deployment process that simplifies updates and environment configuration.

  • Flexible Environment Configuration:
    Customize your installation using environment variables and templated configuration files to match your infrastructure needs.

Other Resources

Persona contract opt-outs

phpLDAPadmin authenticates with an LDAP bind DN and the OpenLDAP administrator_database_password, not with the Keycloak administrator username/password pair, so the administrator persona has no in-app credential once it is through the oauth2-proxy. meta/services.yml additionally admits only the web-app-phpldapadmin administrator RBAC group to that proxy (sso.oauth2.allowed_groups), and biber carries an empty role list, so it is denied before phpLDAPadmin is reached. templates/playwright.env.j2 therefore declares PERSONA_BIBER_BLOCKED=true and PERSONA_ADMINISTRATOR_BLOCKED=true; the guest persona and the baseline assertions run unconditionally.