Role Name

install openldap servers on CentOS - should work on RH too

Requirements

none

Role Variables

defined in vars/main.yml and vars/CentOS.yml

ldap_domain - example
ldap_domain_ex - net
ldap_suffix - constructed from variables above example.net
ldap_admin_dn - cn=manager,{{ ldap_suffix }}
ldap_admin_password - 123Soleil - should be in a vault ...)
ldap_packages - liste of packages - should be the only thing to change to adapt to other distro
ldap_service - name of service unit file - slapd
ldap_user - slapd service account
import_data - bool - control wether we import initial data from LDIF files you will have put in templates subdirectory. Default No
ldap_schemas - list of additionnal schema names to load - default cosine
ldap_replication_consumer - bool -true to setup a replication consumer
ldap_replication_provider - bool -true to setup a replication provider
ldap_replication_account - account used for replication
ldap_replication_password - account password used for replication

ldap_replication_provider_uri - ldap uri of provider server

ldap_have_ssl - boolean - wether we use ssl or not
ldap_ssl_dir - directory where certificates will be stored
ldap_ssl_cert_path - {{ ldap_ssl_dir }}/{{ ansible_fqdn }}_fullchain.pem
ldap_ssl_cacert_path - {{ ldap_ssl_dir }}/{{ ansible_fqdn }}_fullchain.pem
ldap_ssl_key_path - {{ ldap_ssl_dir }}/{{ ansible_fqdn }}_privkey.pem

Dependencies

None

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

  - hosts: servers
  roles:
     - role: slapd
       vars:
          ldap_domain: example
          ldap_domain_ex: net
          import_data: true
          ldap_schemas:
          - cosine
          - nis
          - inetorgperson

License

BSD Author Information

Thomas C thomas@opendoor.fr