make it work basically on debian

This commit is contained in:
2024-02-06 12:10:08 +01:00
parent 4a829ed81a
commit c26cb5f4ac
9 changed files with 75 additions and 69 deletions

View File

@@ -3,6 +3,7 @@
ldap_domain: example
ldap_domain_ext: fr
ldap_server: ldap://localhost
ldap_config_dir: /etc/openldap
ldap_secret_file: /root/.ldap.secret
ldap_provider_uri: "{{ ansible_fqdn }}"
ldap_suffix: "dc={{ ldap_domain }},dc={{ ldap_domain_ext }}"
@@ -12,12 +13,10 @@ ldap_replication_provider: false
ldap_schemas:
- cosine
ldap_have_ssl: true
ldap_ssl_dir: /etc/openldap/certs/
ldap_ssl_dir: "{{ ldap_config_dir }}/certs/"
ldap_ssl_cert_path: "{{ ldap_ssl_dir }}/cert.pem"
ldap_ssl_key_path: "{{ ldap_ssl_dir }}/key.pem"
ldap_ssl_cacert_path: "{{ ldap_ssl_dir }}/cert.pem"
ldap_admin_dn: "cn=manager,{{ldap_suffix}}"
ldap_admin_password: "CHANGEME"
ldap_auth:
bind_dn: "{{ ldap_admin_dn }}"
bind_pw: "{{ ldap_admin_password }}"
@@ -29,10 +28,10 @@ ldap_entries:
objectClass: olcModuleList
attributes:
cn: module
olcModulePath: /usr/lib64/openldap/
olcModulePath: "{{ ldap_module_dir }}"
olcModuleLoad: auditlog.la
- dn: olcOverlay={0}auditlog,olcDatabase={2}hdb,cn=config
- dn: "olcOverlay={0}auditlog,{{ ldap_database }}"
objectClass:
- olcOverlayConfig
- olcAuditLogConfig
@@ -44,10 +43,10 @@ ldap_entries:
objectClass: olcModuleList
attributes:
cn: module
olcModulePath: /usr/lib64/openldap/
olcModulePath: "{{ ldap_module_dir }}"
olcModuleLoad: memberof.la
- dn: olcOverlay={1}memberof,olcDatabase={2}hdb,cn=config
- dn: "olcOverlay={1}memberof,{{ ldap_database }}"
objectClass:
- olcConfig
- olcOverlayConfig
@@ -59,10 +58,10 @@ ldap_entries:
objectClass: olcModuleList
attributes:
cn: module
olcModulePath: /usr/lib64/openldap/
olcModulePath: "{{ ldap_module_dir }}"
olcModuleLoad: unique.la
- dn: olcOverlay={2}unique,olcdatabase={2}hdb,cn=config
- dn: "olcOverlay={2}unique,{{ ldap_database }}"
objectClass:
- olcOverlayConfig
- olcUniqueConfig