Name already in use

Update the Mailman 3 images and service deployment scripts so
that Apache HTTP Server with the Shibboleth SP serves as the
web proxy so that the Mailman 3 UI interfaces (Postorius and
Hyperkitty) are protected with SAML.

Changes necessary to ingegrate COmanage Registry with Mailman 3.2.0.

Fix bug when using the environment variable
COMANAGE_REGISTRY_ENABLE_PLUGIN to specify a comma separated list of
plugins to enable where the comma separated list was not parsed
correctly.

Add the ca-certificates package to the slapd base image so that any
clients or client libraries that need to call out, such as syncrepl
clients, can properly check server TLS certificates and do
ldaps://.

Update Postfix entrypoint and main.cf configuration file to enable
injection of mynetworks configuration so that the proper networks may be
enabled or restricted.

Updated Mailman 3 Web Dockerfile to pin version numbers for various
django- modules. Updated settings.py configuration to remove all
social login providers. Updated login template file to remove links
to social providers.

Removed a hardcoded server name for the Mailman nginx configuration file
and replaced with logic to inject the server name based on environment
variable.

Added a default maximum open file descriptors set with
ulimit -n for the slapd process. See
https://github.com/moby/moby/issues/8231
for a discussion of how this helps decrease the memory
used by slapd when running inside a container.

Update the source URL for santuario used by the Shibboleth SP.

Add logic to perform a chown openldap:openldap on the directory
files from the Debian distribution so that slapd always may start
even when the numeric uid has changed, for example when /etc/passwd
is mounted in. This was previously done for the directory files being
used (database with n 2) but not for those that are not being
used (database with n 1).

Added logic to set the owner and permissions for the slapd TLS
certificate, privkey, and CA cert files so that they are explicitly
owned by openldap with the correct permissions.

Updated the documentation to remove hardcoded versions for
COmanage Registry and instead point to the COmanage Registry
Release History wiki page along with a sed command
to replace COMANAGE_REGISTRY_VERSION in the compose file.

Updated COmanage Registry recommended version to 3.1.0 for the basic
auth with Postgres documentation.

Updated the recommended version on the top level to 3.1.0.

Updated Shibboleth SP source URLs to remove 'latest' from the paths.

If the deployer maps in or copies in a different /etc/passwd file that
assigns the openldap user a different UID change the ownership of
/var/run/slapd so that it has the correct owner.

Fixed logic preventing slapd entrypoint script from running to
completion when no schema files are injected into /schema.

If LDAP_DEBUG is set then the entrypoint script for the slapd images
will invoke 'set -x' and send all output to stdout.

Text in injected LDIF files of the form %%SOME_VARIABLE%% will be
replaced with the value from the environment variable SOME_VARIABLE
before the LDIF is executed. The form %%_SOME_VARIABLE_FILE%% will be
replaced with the contents of the file pointed to by the environment
variable SOME_VARIABLE.

Better processing of injected LDIF files to be executed using either
SASL external mechanism or the root DN.

Better processing of schema files for the slapd base image.

Added logic to process LDIF files at startup time.

Added Dockerfile and associated files to create image used to create a
container that runs slapd as an LDAP proxy to help support
high availability.

Added logic to the COmanage LDAP utils bash library to support the
deployment of a slapd proxy.

As part of refactor of slapd moved the entrypoint script from
slapd-base to slapd and created Dockerfile for slapd to put it
into plase.

As part of refactor of the slapd images move
comanage-registry-slapd to comanage-registry-slapd-base.

Moved most of the slapd entrypoint script to a bash package
so that it is more reuseable with downstream Docker packages.

Update the base image tag from php:7.0-apache to php:7.0-apache-jessie
since php:7.0-apache now uses stretch as a base and the package
dependencies need to be evolved before just switching to stretch.