116 lines
3.1 KiB
YAML
116 lines
3.1 KiB
YAML
|
---
|
||
|
|
||
|
|
||
|
########################## ldap-auth
|
||
|
- name: Set bind DN
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/binddn
|
||
|
value: cn=ldapservice,dc=directory,dc=nh
|
||
|
vtype: string
|
||
|
|
||
|
- name: Set root bind DN
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/rootbinddn
|
||
|
value: cn=ldapservice,dc=directory,dc=nh
|
||
|
vtype: string
|
||
|
|
||
|
- name: Set base DN
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/ldapns/base-dn
|
||
|
value: dc=directory,dc=nh
|
||
|
vtype: string
|
||
|
|
||
|
- name: Set login required
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/dblogin
|
||
|
value: "true"
|
||
|
vtype: boolean
|
||
|
|
||
|
- name: Set root login required
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/dbrootlogin
|
||
|
value: "true"
|
||
|
vtype: boolean
|
||
|
|
||
|
- name: Set ldap override
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/override
|
||
|
value: "true"
|
||
|
vtype: boolean
|
||
|
|
||
|
- name: Set move-to-debconf
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/move-to-debconf
|
||
|
value: "true"
|
||
|
vtype: boolean
|
||
|
|
||
|
- name: Set pam password
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/pam_password
|
||
|
value: exop
|
||
|
vtype: select
|
||
|
|
||
|
- name: Set LDAP server
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/ldapns/ldap-server
|
||
|
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
|
||
|
vtype: string
|
||
|
|
||
|
- name: Set LDAP server version
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/ldapns/ldap_version
|
||
|
value: "3"
|
||
|
vtype: select
|
||
|
|
||
|
- name: Set bind password
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/bindpw
|
||
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
||
|
vtype: password
|
||
|
|
||
|
- name: Set root bind password
|
||
|
debconf:
|
||
|
name: ldap-auth-config
|
||
|
question: ldap-auth-config/rootbindpw
|
||
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
||
|
vtype: password
|
||
|
|
||
|
########################## libnss-ldapd
|
||
|
- name: Configure libnss for ldap
|
||
|
debconf:
|
||
|
name: libnss-ldapd
|
||
|
question: libnss-ldapd/nsswitch
|
||
|
value: "passwd, group, shadow"
|
||
|
vtype: multiselect
|
||
|
- name: Configure libnss for not removing ldap configuration
|
||
|
debconf:
|
||
|
name: libnss-ldapd
|
||
|
question: libnss-ldapd/clean_nsswitch
|
||
|
value: "false"
|
||
|
vtype: boolean
|
||
|
|
||
|
########################## packages install
|
||
|
- name: Installing client packages
|
||
|
apt:
|
||
|
name: [ 'libnss-ldapd', 'ldap-auth-config' ]
|
||
|
state: latest
|
||
|
|
||
|
########################## idmap.conf
|
||
|
- name: Tweak idmap.conf
|
||
|
ini_file:
|
||
|
path: /etc/idmapd.conf
|
||
|
section: Translation
|
||
|
option: Method
|
||
|
value: nsswitch
|
||
|
mode: 0644
|