forked from LibreSchool/libreschool-nfs
116 lines
3.1 KiB
YAML
116 lines
3.1 KiB
YAML
---
|
|
|
|
|
|
########################## ldap-auth
|
|
- name: Set bind DN
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/binddn
|
|
value: cn=ldapservice,dc=directory,dc=nh
|
|
vtype: string
|
|
|
|
- name: Set root bind DN
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/rootbinddn
|
|
value: cn=ldapservice,dc=directory,dc=nh
|
|
vtype: string
|
|
|
|
- name: Set base DN
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/ldapns/base-dn
|
|
value: dc=directory,dc=nh
|
|
vtype: string
|
|
|
|
- name: Set login required
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/dblogin
|
|
value: "true"
|
|
vtype: boolean
|
|
|
|
- name: Set root login required
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/dbrootlogin
|
|
value: "true"
|
|
vtype: boolean
|
|
|
|
- name: Set ldap override
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/override
|
|
value: "true"
|
|
vtype: boolean
|
|
|
|
- name: Set move-to-debconf
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/move-to-debconf
|
|
value: "true"
|
|
vtype: boolean
|
|
|
|
- name: Set pam password
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/pam_password
|
|
value: exop
|
|
vtype: select
|
|
|
|
- name: Set LDAP server
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/ldapns/ldap-server
|
|
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
|
|
vtype: string
|
|
|
|
- name: Set LDAP server version
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/ldapns/ldap_version
|
|
value: "3"
|
|
vtype: select
|
|
|
|
- name: Set bind password
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/bindpw
|
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
|
vtype: password
|
|
|
|
- name: Set root bind password
|
|
debconf:
|
|
name: ldap-auth-config
|
|
question: ldap-auth-config/rootbindpw
|
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
|
vtype: password
|
|
|
|
########################## libnss-ldapd
|
|
- name: Configure libnss for ldap
|
|
debconf:
|
|
name: libnss-ldapd
|
|
question: libnss-ldapd/nsswitch
|
|
value: "passwd, group, shadow"
|
|
vtype: multiselect
|
|
- name: Configure libnss for not removing ldap configuration
|
|
debconf:
|
|
name: libnss-ldapd
|
|
question: libnss-ldapd/clean_nsswitch
|
|
value: "false"
|
|
vtype: boolean
|
|
|
|
########################## packages install
|
|
- name: Installing client packages
|
|
apt:
|
|
name: [ 'libnss-ldapd', 'ldap-auth-config' ]
|
|
state: latest
|
|
|
|
########################## idmap.conf
|
|
- name: Tweak idmap.conf
|
|
ini_file:
|
|
path: /etc/idmapd.conf
|
|
section: Translation
|
|
option: Method
|
|
value: nsswitch
|
|
mode: 0644 |