make it work basically on debian
This commit is contained in:
@@ -3,6 +3,7 @@
|
||||
ldap_domain: example
|
||||
ldap_domain_ext: fr
|
||||
ldap_server: ldap://localhost
|
||||
ldap_config_dir: /etc/openldap
|
||||
ldap_secret_file: /root/.ldap.secret
|
||||
ldap_provider_uri: "{{ ansible_fqdn }}"
|
||||
ldap_suffix: "dc={{ ldap_domain }},dc={{ ldap_domain_ext }}"
|
||||
@@ -12,12 +13,10 @@ ldap_replication_provider: false
|
||||
ldap_schemas:
|
||||
- cosine
|
||||
ldap_have_ssl: true
|
||||
ldap_ssl_dir: /etc/openldap/certs/
|
||||
ldap_ssl_dir: "{{ ldap_config_dir }}/certs/"
|
||||
ldap_ssl_cert_path: "{{ ldap_ssl_dir }}/cert.pem"
|
||||
ldap_ssl_key_path: "{{ ldap_ssl_dir }}/key.pem"
|
||||
ldap_ssl_cacert_path: "{{ ldap_ssl_dir }}/cert.pem"
|
||||
ldap_admin_dn: "cn=manager,{{ldap_suffix}}"
|
||||
ldap_admin_password: "CHANGEME"
|
||||
ldap_auth:
|
||||
bind_dn: "{{ ldap_admin_dn }}"
|
||||
bind_pw: "{{ ldap_admin_password }}"
|
||||
@@ -29,10 +28,10 @@ ldap_entries:
|
||||
objectClass: olcModuleList
|
||||
attributes:
|
||||
cn: module
|
||||
olcModulePath: /usr/lib64/openldap/
|
||||
olcModulePath: "{{ ldap_module_dir }}"
|
||||
olcModuleLoad: auditlog.la
|
||||
|
||||
- dn: olcOverlay={0}auditlog,olcDatabase={2}hdb,cn=config
|
||||
- dn: "olcOverlay={0}auditlog,{{ ldap_database }}"
|
||||
objectClass:
|
||||
- olcOverlayConfig
|
||||
- olcAuditLogConfig
|
||||
@@ -44,10 +43,10 @@ ldap_entries:
|
||||
objectClass: olcModuleList
|
||||
attributes:
|
||||
cn: module
|
||||
olcModulePath: /usr/lib64/openldap/
|
||||
olcModulePath: "{{ ldap_module_dir }}"
|
||||
olcModuleLoad: memberof.la
|
||||
|
||||
- dn: olcOverlay={1}memberof,olcDatabase={2}hdb,cn=config
|
||||
- dn: "olcOverlay={1}memberof,{{ ldap_database }}"
|
||||
objectClass:
|
||||
- olcConfig
|
||||
- olcOverlayConfig
|
||||
@@ -59,10 +58,10 @@ ldap_entries:
|
||||
objectClass: olcModuleList
|
||||
attributes:
|
||||
cn: module
|
||||
olcModulePath: /usr/lib64/openldap/
|
||||
olcModulePath: "{{ ldap_module_dir }}"
|
||||
olcModuleLoad: unique.la
|
||||
|
||||
- dn: olcOverlay={2}unique,olcdatabase={2}hdb,cn=config
|
||||
- dn: "olcOverlay={2}unique,{{ ldap_database }}"
|
||||
objectClass:
|
||||
- olcOverlayConfig
|
||||
- olcUniqueConfig
|
||||
|
||||
Reference in New Issue
Block a user