Added GSSAPI Authentication.

entrypoint.sh

@@ -31,6 +31,15 @@ else
     echo "TLS      : disabled"
 fi
 
+kerberos_enabled="0"
+if [ "${KERBEROS_ENABLE:-0}" = "1" ]; then
+    kerberos_enabled="1"
+    export KRB5_KTNAME="${KRB5_KTNAME:-/etc/ldap/ldap.keytab}"
+    echo "Kerberos : enabled (keytab: $KRB5_KTNAME)"
+else
+    echo "Kerberos : disabled"
+fi
+
 echo "Ensuring slapd runtime directory..."
 mkdir -p /var/run/slapd
 chown openldap:openldap /var/run/slapd
@@ -59,6 +68,7 @@ EOF
     LDAP_BASE_DN="$base_dn" \
     LDAP_PASSWORD="$password" \
     TLS_ENABLED="$tls_enabled" \
+    KERBEROS_ENABLE="$kerberos_enabled" \
     python3 -u /bootstrap/init.py
 else
     echo "Already initialised - skipping bootstrap."