31 lines
910 B
YAML
31 lines
910 B
YAML
---
|
|
# ansible-playbook /etc/ansible/Playbooks/new_ldap_user.yml -K --ask-vault-pass
|
|
# --extra-vars="file=account.csv"
|
|
- name: set some vars
|
|
ansible.builtin.set_fact:
|
|
binddn: "{{ lookup( 'viczem.keepass.keepass', 'opendoor/collidine_ldap_password', 'username' ) }}"
|
|
bindpwd: "{{ lookup( 'viczem.keepass.keepass', 'opendoor/collidine_ldap_password', 'password' ) }}"
|
|
tags: always
|
|
when: binddn is not defined
|
|
|
|
- name: "add ldap ou ou={{ org }},{{ ldap_base }}"
|
|
community.general.ldap_entry:
|
|
dn: "ou={{ org }},{{ ldap_base }}"
|
|
bind_dn: "{{ binddn }}"
|
|
bind_pw: "{{ bindpwd }}"
|
|
objectClass:
|
|
- organizationalUnit
|
|
- top
|
|
|
|
- name: read csv file
|
|
community.general.read_csv:
|
|
path: '{{ file|default( "account.csv" ) }}'
|
|
register: users
|
|
delegate_to: localhost
|
|
|
|
- include_tasks: ldap_user_inc.yml
|
|
loop: "{{ users.list }}"
|
|
|
|
|
|
|