--- ########################## ldap-auth - name: Set bind DN debconf: name: ldap-auth-config question: ldap-auth-config/binddn value: cn=ldapservice,dc=directory,dc=nh vtype: string - name: Set root bind DN debconf: name: ldap-auth-config question: ldap-auth-config/rootbinddn value: cn=ldapservice,dc=directory,dc=nh vtype: string - name: Set base DN debconf: name: ldap-auth-config question: ldap-auth-config/ldapns/base-dn value: dc=directory,dc=nh vtype: string - name: Set login required debconf: name: ldap-auth-config question: ldap-auth-config/dblogin value: "true" vtype: boolean - name: Set root login required debconf: name: ldap-auth-config question: ldap-auth-config/dbrootlogin value: "true" vtype: boolean - name: Set ldap override debconf: name: ldap-auth-config question: ldap-auth-config/override value: "true" vtype: boolean - name: Set move-to-debconf debconf: name: ldap-auth-config question: ldap-auth-config/move-to-debconf value: "true" vtype: boolean - name: Set pam password debconf: name: ldap-auth-config question: ldap-auth-config/pam_password value: exop vtype: select - name: Set LDAP server debconf: name: ldap-auth-config question: ldap-auth-config/ldapns/ldap-server value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/ vtype: string - name: Set LDAP server version debconf: name: ldap-auth-config question: ldap-auth-config/ldapns/ldap_version value: "3" vtype: select - name: Set bind password debconf: name: ldap-auth-config question: ldap-auth-config/bindpw value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}" vtype: password - name: Set root bind password debconf: name: ldap-auth-config question: ldap-auth-config/rootbindpw value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}" vtype: password ########################## libnss-ldapd - name: Configure libnss for ldap debconf: name: libnss-ldapd question: libnss-ldapd/nsswitch value: "passwd, group, shadow" vtype: multiselect - name: Configure libnss for not removing ldap configuration debconf: name: libnss-ldapd question: libnss-ldapd/clean_nsswitch value: "false" vtype: boolean ########################## packages install - name: Installing client packages apt: name: [ 'libnss-ldapd', 'ldap-auth-config' ] state: latest ########################## idmap.conf - name: Tweak idmap.conf ini_file: path: /etc/idmapd.conf section: Translation option: Method value: nsswitch mode: 0644