# baseimage-debian-rdp-ldap
Debian Desktop with LDAP-Auth to use with Guacamole as RDP-destination

[![Build Status](https://git.pi-farm.de/pi-farm/baseimage-debian-rdp-ldap/actions/workflows/build-and-push.yaml/badge.svg)](https://git.pi-farm.de/pi-farm/baseimage-debian-rdp-ldap/actions)
[![Gitea Repo](https://img.shields.io/badge/gitea-repository-blue?logo=gitea&logoColor=white)](__REPO_URL__)

This repository is built and pushed automatically.



### 🏗️ Platform Support
| Architecture | Status | Base Image | Build Date |
| :--- | :--- | :--- | :--- |
| x86_64 (amd64) | ✅ Active | debian:bookworm | 02.04.2026 16:44 |
| aarch64 (arm64) | ✅ Active | debian:bookworm | 02.04.2026 16:44 |

### 🚀 Docker Pull
```bash
docker pull git.pi-farm.de/pi-farm/baseimage-debian-rdp-ldap:bookworm-de
```
### 🚀 Docker Compose
```yaml
services:
  baseimage-debian-rdp-ldap:
    image: git.pi-farm.de/pi-farm/baseimage-debian-rdp-ldap:bookworm-de
    container_name: baseimage-debian-rdp-ldap
    restart: unless-stopped
    ports:
      - 3889
    environment:
      - SSSD_DEBUG_LEVEL=9
      - LDAP_SCHEMA=rfc2307
      - LDAP_AUTH_DISABLE_TLS=true
      - LDAP_SERVER_URI=URL-OF-YOUR-LDAP-SERVER
      - LDAP_BIND_USER=admin
      - LDAP_DOMAIN_DC=dc=YOUR-DOMAIN,dc=COM
      - LDAP_BIND_PASSWORD=YOUR-SUPER-SECRET-PASSWORD
      - LDAP_SEARCH_BASE=dc=YOUR-DOMAIN,dc=COM
      - LDAP_USER_SEARCH_BASE=ou=users,dc=YOUR-DOMAIN,dc=COM
      - LDAP_GROUP_SEARCH_BASE=dc=YOUR-DOMAIN,dc=COM
      - LDAP_USER_PASSWORD_ATTRIBUTE=userPassword
      - LDAP_USER_OBJECT_CLASS=posixAccount
      - LDAP_USER_NAME=uid
      - LDAP_USER_DN_ATTRIBUTE=cn
      - LDAP_GROUP_OBJECTS_CLASS=posixGroup
      - LDAP_ID_USE_START_TLS=false
      - LDAP_AUTH_USE_START_TLS=false
      - LDAP_TLS_REQCERT=never
      - LDAP_SIMPLE_ALLOW_GROUPS=users
    volumes:
      - ./sssd.conf:/etc/sssd/sssd.conf:ro
      - ./home:/home
```
### 🚀 Docker Run
```bash
docker run -d \
  --name baseimage-debian-rdp-ldap \
  --restart unless-stopped \
  -e SSSD_DEBUG_LEVEL=9 \
  -e LDAP_SCHEMA=rfc2307 \
  -e LDAP_AUTH_DISABLE_TLS=true \
  -e LDAP_SERVER_URI=URL-OF-YOUR-LDAP-SERVER \
  -e LDAP_BIND_USER=admin \
  -e LDAP_DOMAIN_DC=dc=YOUR-DOMAIN,dc=COM \
  -e LDAP_BIND_PASSWORD=YOUR-SUPER-SECRET-PASSWORD \
  -e LDAP_SEARCH_BASE=dc=YOUR-DOMAIN,dc=COM \
  -e LDAP_USER_SEARCH_BASE=ou=users,dc=YOUR-DOMAIN,dc=COM \
  -e LDAP_GROUP_SEARCH_BASE=dc=YOUR-DOMAIN,dc=COM \
  -e LDAP_USER_PASSWORD_ATTRIBUTE=userPassword \
  -e LDAP_USER_OBJECT_CLASS=posixAccount \
  -e LDAP_USER_NAME=uid \
  -e LDAP_USER_DN_ATTRIBUTE=cn \
  -e LDAP_GROUP_OBJECTS_CLASS=posixGroup \
  -e LDAP_ID_USE_START_TLS=false \
  -e LDAP_AUTH_USE_START_TLS=false \
  -e LDAP_TLS_REQCERT=never \
  -e LDAP_SIMPLE_ALLOW_GROUPS=users \
  -v ./sssd.conf:/etc/sssd/sssd.conf:ro \
  -v ./home:/home \
  -p 3889 \
  git.pi-farm.de/pi-farm/baseimage-debian-rdp-ldap:bookworm-de
```

*Last updated on: 02.04.2026 16:44*

### 📜 Version History
| Version | Date | Status |
| :--- | :--- | :--- |
| **bookworm-de** | 02.04.2026 16:44 |  ✅ |
| **bookworm-de** | 02.04.2026 15:37 |  ✅ |
| **bookworm** | 02.04.2026 14:15 |  ✅ |