role slapd:

- setup ssl (WIP)
- setup replication provider (WIP)
- setup replication consumer (WIP)

ssl and replication provider seems to be ok (need to test on clean machine)

replication consumer needs more testing
This commit is contained in:
2019-07-19 14:54:26 +02:00
parent 2ee476a4ef
commit 15911cbd6f
8 changed files with 156 additions and 6 deletions

17
templates/ssl.ldif Normal file
View File

@@ -0,0 +1,17 @@
dn: cn=config
changetype: modify
replace: olcTLSCertificateFile
olcTLSCertificateFile: {{ ldap_ssl_cert_path }}
-
replace: olcTLSCertificateKeyfile
olcTLSCertificateKeyfile: {{ ldap_ssl_key_path }}
-
replace: olcTLSCipherSuite
olcTLSCipherSuite: TLSv1+RSA:!NULL
-
replace: olctlsverifyclient
olctlsverifyclient: never
-
replace: olctlscacertificatefile
olctlscacertificatefile: {{ ldap_ssl_cacert_path }}