Add support for ldap over ssl

web-apache-mysql/alpine/Dockerfile

@@ -34,6 +34,8 @@ RUN addgroup zabbix && \
             php5-xmlreader \
             php5-ldap \
             php5-json \
+            ca-certificates \
+            openldap-clients \
             ttf-dejavu && \
     rm -rf /var/cache/apk/*
 
@@ -73,6 +75,8 @@ ADD conf/etc/zabbix/apache.conf /etc/zabbix/
 ADD conf/etc/zabbix/apache_ssl.conf /etc/zabbix/
 ADD conf/etc/zabbix/web/zabbix.conf.php /etc/zabbix/web/
 ADD conf/etc/php5/conf.d/99-zabbix.ini /etc/php5/conf.d/
+ADD conf/etc/openldap/ldap.conf /etc/openldap/ldap.conf
+ADD conf/etc/openldap/certs /etc/openldap/certs
 ADD run_zabbix_component.sh /
 
 ENTRYPOINT ["/bin/bash"]

web-apache-mysql/alpine/conf/etc/openldap/ldap.conf

@@ -0,0 +1,18 @@
+#
+# LDAP Defaults
+#
+
+# See ldap.conf(5) for details
+# This file should be world readable but not world writable.
+
+#BASE	dc=example,dc=com
+#URI	ldap://ldap.example.com ldap://ldap-master.example.com:666
+
+#SIZELIMIT	12
+#TIMELIMIT	15
+#DEREF		never
+
+TLS_CACERTDIR	/etc/openldap/certs
+
+# Turning this off breaks GSSAPI used with krb5 when rdns = false
+SASL_NOCANON	on