libreschool-nfs/root/etc/ansible/roles/nfs-client/tasks/ldap-zorin-12asd.yml

150 lines
3.3 KiB
YAML
Raw Normal View History

2018-12-01 09:14:14 +00:00
---
2020-03-23 14:11:27 +00:00
- name: ldap configuration
template:
src: 'ldap.conf'
dest: '/etc/ldap.conf'
owner: 'root'
group: 'root'
mode: 0644
2018-12-01 09:14:14 +00:00
2020-03-23 14:11:27 +00:00
- name: nsswitch settings for passwd
lineinfile:
backup: yes
path: /etc/nsswitch.conf
state: present
regexp: '^passwd\:'
line: 'passwd: files ldap'
2018-12-01 09:14:14 +00:00
2020-03-23 14:11:27 +00:00
- name: nsswitch settings for group
lineinfile:
backup: yes
path: /etc/nsswitch.conf
state: present
regexp: '^group\:'
line: 'group: files ldap'
2018-12-01 09:14:14 +00:00
2020-03-23 14:11:27 +00:00
- name: nsswitch settings for shadow
lineinfile:
backup: yes
path: /etc/nsswitch.conf
state: present
regexp: '^shadow\:'
line: 'shadow: files ldap'
2020-03-08 09:56:22 +00:00
2020-03-23 14:11:27 +00:00
------------ cut here
2020-03-08 09:56:22 +00:00
########################## ldap-auth
- name: Set bind DN
debconf:
name: ldap-auth-config
question: ldap-auth-config/binddn
value: cn=ldapservice,dc=directory,dc=nh
vtype: string
- name: Set root bind DN
debconf:
name: ldap-auth-config
question: ldap-auth-config/rootbinddn
value: cn=ldapservice,dc=directory,dc=nh
vtype: string
- name: Set base DN
debconf:
name: ldap-auth-config
question: ldap-auth-config/ldapns/base-dn
value: dc=directory,dc=nh
vtype: string
- name: Set login required
debconf:
name: ldap-auth-config
question: ldap-auth-config/dblogin
value: "true"
vtype: boolean
- name: Set root login required
debconf:
name: ldap-auth-config
question: ldap-auth-config/dbrootlogin
value: "true"
vtype: boolean
- name: Set ldap override
debconf:
name: ldap-auth-config
question: ldap-auth-config/override
value: "true"
vtype: boolean
- name: Set move-to-debconf
debconf:
name: ldap-auth-config
question: ldap-auth-config/move-to-debconf
value: "true"
vtype: boolean
2018-12-01 09:14:14 +00:00
2020-03-08 09:56:22 +00:00
- name: Set pam password
debconf:
name: ldap-auth-config
question: ldap-auth-config/pam_password
value: exop
vtype: select
- name: Set LDAP server
debconf:
name: ldap-auth-config
question: ldap-auth-config/ldapns/ldap-server
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
vtype: string
- name: Set LDAP server version
debconf:
name: ldap-auth-config
question: ldap-auth-config/ldapns/ldap_version
value: "3"
vtype: select
- name: Set bind password
debconf:
name: ldap-auth-config
question: ldap-auth-config/bindpw
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
vtype: password
- name: Set root bind password
debconf:
name: ldap-auth-config
question: ldap-auth-config/rootbindpw
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
vtype: password
2020-03-08 09:56:32 +00:00
########################## libnss-ldapd
2020-03-08 09:56:22 +00:00
- name: Configure libnss for ldap
debconf:
name: libnss-ldapd
question: libnss-ldapd/nsswitch
value: "passwd, group, shadow"
vtype: multiselect
2020-03-08 18:37:11 +00:00
- name: Configure libnss for not removing ldap configuration
2020-03-08 09:56:22 +00:00
debconf:
name: libnss-ldapd
question: libnss-ldapd/clean_nsswitch
value: "false"
vtype: boolean
########################## packages install
- name: Installing client packages
apt:
name: [ 'libnss-ldapd', 'ldap-auth-config' ]
state: latest
########################## idmap.conf
- name: Tweak idmap.conf
ini_file:
path: /etc/idmapd.conf
section: Translation
option: Method
value: nsswitch
2020-03-23 14:11:27 +00:00
mode: 0644