Role Name

install openldap servers on CentOS - should work on RH too

Requirements

none

Role Variables

defined in vars/main.yml and vars/CentOS.yml

ldap_domain - example
ldap_domain_ex - net
ldap_suffix - constructed from variables above example.net
ldap_admin_dn - cn=manager,{{ ldap_suffix }}
ldap_admin_password - 123Soleil - should be in a vault ...)
ldap_packages - liste of packages - should be the only thing to change to adapt to other distro
ldap_service - name of service unit file - slapd
ldap_user - slapd service account
import_data - bool - control wether we import initial data from LDIF files you will have put in templates subdirectory. Default No
ldap_schemas - list of additionnal schema names to load - default cosine
ldap_replication_consumer - bool -true to setup a replication consumer
ldap_replication_provider - bool -true to setup a replication provider
ldap_replication_account - account used for replication
ldap_replication_password - account password used for replication

ldap_replication_provider_uri - ldap uri of provider server

ldap_have_ssl - boolean - wether we use ssl or not
ldap_ssl_dir - directory where certificates will be stored
ldap_ssl_cert_path - {{ ldap_ssl_dir }}/{{ ansible_fqdn }}_fullchain.pem
ldap_ssl_cacert_path - {{ ldap_ssl_dir }}/{{ ansible_fqdn }}_fullchain.pem
ldap_ssl_key_path - {{ ldap_ssl_dir }}/{{ ansible_fqdn }}_privkey.pem
ldap_ldif_files - optional list of ldif files to send to server and inject. Will be templated. need absolute path

Dependencies

None

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

  - hosts: servers
  roles:
     - role: slapd
       vars:
          ldap_domain: example
          ldap_domain_ex: net
          import_data: true
          ldap_schemas:
          - cosine
          - nis
          - inetorgperson

License

BSD Author Information

Thomas C thomas@opendoor.fr