Name already in use

Refactor the Shibboleth SP logging configuration so that default
shibd.logger, native.logger, and console.logger with details appropriate
for Docker images are in the base and can be easily copied into images.
Remove shibd.logger and native.logger from the COmanage Registry and
Mailman images as a result.

Updated the Shibboleth SP template configuration file to make it
consistent with the default example configuration from the
Shibboleth SP 3.0.4 release.

Removed the logger attribute from the root element
<SPConfig> of the Shibboleth SP configuration template file
so that the SP will default to using shibd.logger for out of
process (shibd) and native.logger for in proccess (module).

Updated the Mailman 3 for COmanage Registry images to
version 0.2.3 to pick up more recent version of
core (3.2.2), postorious (1.2.4), and hyperkitty (1.2.2).

Updated Dockerfiles for both COmanage Registry base and the I2 TAP base
to use PHP version 7.3.6.

Remove the shibboleth2.xml template file installed by the RPM
from the image so that it is not included when a volume is created
from the mount point /etc/shibboleth, which is declared using the
VOLUME instruction.

Added the ability to inject the relayhost configuration for postfix.

Refactored the Dockerfiles and related
tooling to leverage Docker multi-stage build
functionality. Also updated base containers
to pick up later releases of Apache HTTP Server,
PHP, Shibboleth SP, and mod_auth_openidc.

Update the Mailman 3 images and service deployment scripts so
that Apache HTTP Server with the Shibboleth SP serves as the
web proxy so that the Mailman 3 UI interfaces (Postorius and
Hyperkitty) are protected with SAML.

Changes necessary to ingegrate COmanage Registry with Mailman 3.2.0.

Fix bug when using the environment variable
COMANAGE_REGISTRY_ENABLE_PLUGIN to specify a comma separated list of
plugins to enable where the comma separated list was not parsed
correctly.

Add the ca-certificates package to the slapd base image so that any
clients or client libraries that need to call out, such as syncrepl
clients, can properly check server TLS certificates and do
ldaps://.

Update Postfix entrypoint and main.cf configuration file to enable
injection of mynetworks configuration so that the proper networks may be
enabled or restricted.

Updated Mailman 3 Web Dockerfile to pin version numbers for various
django- modules. Updated settings.py configuration to remove all
social login providers. Updated login template file to remove links
to social providers.

Removed a hardcoded server name for the Mailman nginx configuration file
and replaced with logic to inject the server name based on environment
variable.

Added a default maximum open file descriptors set with
ulimit -n for the slapd process. See
https://github.com/moby/moby/issues/8231
for a discussion of how this helps decrease the memory
used by slapd when running inside a container.

Update the source URL for santuario used by the Shibboleth SP.

Add logic to perform a chown openldap:openldap on the directory
files from the Debian distribution so that slapd always may start
even when the numeric uid has changed, for example when /etc/passwd
is mounted in. This was previously done for the directory files being
used (database with n 2) but not for those that are not being
used (database with n 1).

Added logic to set the owner and permissions for the slapd TLS
certificate, privkey, and CA cert files so that they are explicitly
owned by openldap with the correct permissions.

Updated the documentation to remove hardcoded versions for
COmanage Registry and instead point to the COmanage Registry
Release History wiki page along with a sed command
to replace COMANAGE_REGISTRY_VERSION in the compose file.

Updated COmanage Registry recommended version to 3.1.0 for the basic
auth with Postgres documentation.

Updated the recommended version on the top level to 3.1.0.

Updated Shibboleth SP source URLs to remove 'latest' from the paths.

If the deployer maps in or copies in a different /etc/passwd file that
assigns the openldap user a different UID change the ownership of
/var/run/slapd so that it has the correct owner.

Fixed logic preventing slapd entrypoint script from running to
completion when no schema files are injected into /schema.

If LDAP_DEBUG is set then the entrypoint script for the slapd images
will invoke 'set -x' and send all output to stdout.

Text in injected LDIF files of the form %%SOME_VARIABLE%% will be
replaced with the value from the environment variable SOME_VARIABLE
before the LDIF is executed. The form %%_SOME_VARIABLE_FILE%% will be
replaced with the contents of the file pointed to by the environment
variable SOME_VARIABLE.

Better processing of injected LDIF files to be executed using either
SASL external mechanism or the root DN.

Better processing of schema files for the slapd base image.

Added logic to process LDIF files at startup time.