ldap 根本不起作用

services: minio: container_name: minio hostname: minio.innovanon.com image: quay.io/minio/minio:latest # Recommended image from quay.io ports: - "9000:9000" # MinIO API port - "9001:9001" # MinIO Console UI port environment: MINIO_ROOT_USER: minio_admin # Change this to a strong username MINIO_ROOT_PASSWORD: minio_password # Change this to a strong password MINIO_SERVER_URL: http://minio.innovanon.com:9000 # Important for S3 clients SOCKS_PROXY: socks5://tor.innovanon.com:9050 HTTPS_PROXY: socks5://tor.innovanon.com:9050 OTEL_EXPORTER_OTLP_ENDPOINT: http://otel-collector.innovanon.com:4317 VIRTUAL_HOST: minio.innovanon.com VIRTUAL_PORT: 9001 MINIO_IDENTITY_LDAP_ENABLE: true MINIO_IDENTITY_LDAP_SERVER_ADDR: ldap:389 MINIO_IDENTITY_LDAP_SERVER_INSECURE: true MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN: cn=admin,dc=innovanon,dc=com MINIO_IDENTITY_LDAP_LOOKUP_BIND_PASSWORD: abc123 MINIO_IDENTITY_LDAP_USER_DN_SEARCH_BASE_DN: ou=Users,dc=innovanon,dc=com MINIO_IDENTITY_LDAP_USER_DN_SEARCH_FILTER: "(uid=%s)" #MINIO_IDENTITY_LDAP_USER_DN_ATTRIBUTES: uid #MINIO_IDENTITY_LDAP_GROUP_SEARCH_FILTER: # Add if you need group-based policies #MINIO_IDENTITY_LDAP_POLICY_NAME: default-ldap-policy # Example policy mapping volumes: - minio-data:/data # Persistent storage for MinIO data command: server /data --console-address ":9001" # Start server and console on specified ports restart: unless-stopped logging: driver: syslog depends_on: nginx-proxy: condition: service_started # FIXME #syslog: # condition: service_healthy deploy: resources: limits: cpus: 1.0 memory: 500M reservations: cpus: 0.1 memory: 100M healthcheck: #test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:9000/minio/health/live"] test: ["CMD", "curl", "-f", "--connect-timeout", "5", "http://localhost:9000/minio/health/live"] interval: 10s # Check every 10 seconds timeout: 5s # Wait up to 5 seconds for a response retries: 5 # Retry 5 times before marking as unhealthy start_period: 30s # Give MinIO 30 seconds to start up initially volumes: minio-data: