Skip to content
Snippets Groups Projects
Commit 3c1a9482 authored by shirenn's avatar shirenn 🌊
Browse files

[slapd][unsafe] Rennomage variables et doc

parent 34985f55
No related branches found
No related tags found
1 merge request!64Keepalived
File moved
# SLAPD
Deploie un serveur ldap master ou replica
## VARS
slapd:
- ip : l'ip sur lequel il va installer le serveur ldap
- replica : s'il s'agit d'un master ou d'une replica
- replica_rid : le numéro de replica du serveur
- master_ip : l'ip du master
- replication_credentials : les credientials pour authentifier les replicas
auprès du master
......@@ -26,6 +26,6 @@
lineinfile:
path: /etc/default/slapd
regexp: '^SLAPD_SERVICES='
line: 'SLAPD_SERVICES="ldaps://{{ ldap.ip }}/ ldapi:///"'
line: 'SLAPD_SERVICES="ldaps://{{ slapd.ip }}/ ldapi:///"'
notify: Restart slapd
check_mode: no
......@@ -23,7 +23,7 @@ loglevel none
# Where the dynamically loaded modules are stored
modulepath /usr/lib/ldap
moduleload back_mdb
{% if not ldap.replica %}
{% if not slapd.replica %}
moduleload auditlog
overlay auditlog
......@@ -104,13 +104,13 @@ lastmod on
# failure and to speed slapd shutdown.
checkpoint 512 30
{% if ldap.replica %}
{% if slapd.replica %}
syncrepl
rid={{ ldap.replica_rid }}
provider=ldaps://{{ ldap.master_ip }}:636
rid={{ slapd.replica_rid }}
provider=ldaps://{{ slapd.master_ip }}:636
bindmethod=simple
binddn="cn=replicator,dc=crans,dc=org"
credentials={{ ldap.replication_credentials }}
credentials={{ slapd.replication_credentials }}
searchbase="dc=crans,dc=org"
scope=sub
schemachecking=on
......@@ -121,7 +121,7 @@ syncrepl
tls_reqcert=allow
{% endif %}
{% if ldap.replica %}
{% if slapd.replica %}
# The userPassword by default can be changed
# by the entry owning it if they are authenticated.
# Others should not be able to see it, except the
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment