Day 09: OpenLDAP & Jenkins Directory Infrastructure Manifest

🌳 OpenLDAP & Jenkins Directory Infrastructure Manifest

1. Network & Container Configuration

• Private Network Subnet: Associated via Docker network variable $NETWORK_NAME
• Directory Endpoint: ldap://ldap-server:389 (Internal Core DNS Routing)
• Jenkins Service Engine: Exposed externally on Host Port 8080

2. Directory Information Tree (DIT) Schema Map

dc=mycompany,dc=com (Root Domain Component Base DN)
 ├── uid=admin (Directory Manager Admin Account — Password: newpassword123)
 │
 ├── ou=Users (Organizational Unit Container)
 │    ├── uid=alice.smith         (Pass: Password123456 | mail: alice.smith@mycompany.com)
 │    ├── uid=bob.jones           (Pass: Password123456 | mail: bob.jones@mycompany.com)
 │    ├── uid=charlie.brown       (Pass: Password123456 | mail: charlie.brown@mycompany.com)
 │    ├── uid=dana.white          (Pass: Password123456 | mail: dana.white@mycompany.com)
 │    └── uid=ethan.hunt          (Pass: Password987654 | mail: ethan.hunt@mycompany.com)
 │
 └── ou=Groups (Organizational Unit Container)
      ├── cn=jenkins-admins       (Structural Template: groupOfNames | Members: alice, bob)
      └── cn=jenkins-developers   (Structural Template: groupOfNames | Members: charlie, dana, ethan)

3. Core Automation Scripts & Input Data Profiles

Dynamic User Ingestion Engine (add_user.sh)

#!/bin/bash
# High-density automated provisioning file using unquoted Here-Doc variables
FIRST_NAME="John"
LAST_NAME="Doe"
USERNAME="john.doe"
EMAIL="john.doe@mycompany.com"
PASSWORD="SecurePassword2026!"
TARGET_GROUP="jenkins-developers"

cat <<EOF > dynamic_user.ldif
dn: uid=${USERNAME},ou=Users,dc=mycompany,dc=com
objectClass: inetOrgPerson
uid: ${USERNAME}
cn: ${FIRST_NAME} ${LAST_NAME}
sn: ${LAST_NAME}
mail: ${EMAIL}
userPassword: ${PASSWORD}

dn: cn=${TARGET_GROUP},ou=Groups,dc=mycompany,dc=com
changetype: modify
add: member
member: uid=${USERNAME},ou=Users,dc=mycompany,dc=com
EOF

docker exec -i ldap-server ldapadd -x -D "uid=admin,dc=mycompany,dc=com" -w "newpassword123" < dynamic_user.ldif

4. Operational Diagnosis Reference Matrix

System Intent	Optimized Command / Filter	Environmental Context
Authenticated Health Probe	ldapsearch -x -H ldap://localhost:389 -b "dc=mycompany,dc=com" -D "uid=admin,dc=mycompany,dc=com" -w "newpassword123" "(uid=admin)"	Evaluates with Exit Code 0; prevents container initialization loops from timing out.
Isolate Active Sockets	ss -tuln (Linux) / lsof -i -P -n \| grep LISTEN (macOS)	Confirms localhost binding availability on target ports (e.g., 389, 8080).
Isolate Group Roster	ldapsearch -x ... "(cn=jenkins-developers)" member	Fetches the full multi-line Distinguished Name string array for specific groups.
Clipboard Pipeline Export	cat target.ldif \| pbcopy (Mac) / xclip -sel c < target.ldif (Linux)	Pipes massive files instantly without terminal screen line break clipping errors.

5. Jenkins LDAP Plugin Matrix Compliance Specs

• Group Search Filter: (&(objectClass=groupOfNames)(cn={0}))
• Group Membership Resolution Strategy: Selected explicitly to “Search for LDAP groups containing user”
• Group Membership Filter String Token: (member={0})