diff --git a/roles/re2o-ldap-replica/tasks/main.yml b/roles/re2o-ldap-replica/tasks/main.yml index 18afef0da8e7420ac37168ce7e8d5323c750bcf0..558df2fabb6e630c6738203897f2fa781e51e094 100644 --- a/roles/re2o-ldap-replica/tasks/main.yml +++ b/roles/re2o-ldap-replica/tasks/main.yml @@ -11,6 +11,12 @@ retries: 3 until: apt_result is succeeded +# Since we can't apply same updates to the LDAP server, +# we create at the end of the deployment a file which +# indicates that the replica is installed. +# If this file is still present, then we don't redeploy +# the reploy. If it was deleted or missing, then we +# rebuild the replica. - name: Check if installation was done stat: path: /var/lib/slapd/.delete_me_to_reset_ldap_configuration @@ -75,6 +81,7 @@ when: not installation.stat.exists shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /var/lib/slapd/consumer_simple_sync.ldif +# LDAPS configuration - name: Copy TLS certificate template: src: "ldap/{{ item }}.j2" diff --git a/roles/re2o-ldap-replica/templates/ldap/certinfo.ldif.j2 b/roles/re2o-ldap-replica/templates/ldap/certinfo.ldif.j2 index 9e1d6b51cfcae3eb8a8ecdb1eac1ee03986a746e..8571016c49550c556b8d95fee23c700736850eeb 100644 --- a/roles/re2o-ldap-replica/templates/ldap/certinfo.ldif.j2 +++ b/roles/re2o-ldap-replica/templates/ldap/certinfo.ldif.j2 @@ -1,3 +1,5 @@ +{{ ansible_header | comment }} + dn: cn=config add: olcTLSCertificateFile olcTLSCertificateFile: /etc/ldap/ldap.pem diff --git a/roles/re2o-ldap-replica/templates/ldap/consumer_simple_sync.ldif.j2 b/roles/re2o-ldap-replica/templates/ldap/consumer_simple_sync.ldif.j2 index 31d821491a7caf0ad8069e973644fd61dbb94c9e..f15a81dfcde86af2b4cce00ee9612bdaa96a642b 100644 --- a/roles/re2o-ldap-replica/templates/ldap/consumer_simple_sync.ldif.j2 +++ b/roles/re2o-ldap-replica/templates/ldap/consumer_simple_sync.ldif.j2 @@ -1,3 +1,5 @@ +{{ ansible_header | comment }} + dn: olcDatabase={1}hdb,cn=config changetype: modify add: olcSyncrepl diff --git a/roles/re2o-ldap-replica/templates/ldap/db.ldif.j2 b/roles/re2o-ldap-replica/templates/ldap/db.ldif.j2 index dd6f37d5778dee597e9184695e40880d965f6d70..ca2f992f1ff0c6b74ffa6825f0b233877ed8b66c 100644 --- a/roles/re2o-ldap-replica/templates/ldap/db.ldif.j2 +++ b/roles/re2o-ldap-replica/templates/ldap/db.ldif.j2 @@ -1,3 +1,8 @@ +{{ ansible_header | comment }} + +# This file comes from the installation of Re2o +# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/db.ldiff + dn: {{ re2o_ldap_replica.suffix }} o: rezo structuralObjectClass: organization diff --git a/roles/re2o-ldap-replica/templates/ldap/schema.ldif.j2 b/roles/re2o-ldap-replica/templates/ldap/schema.ldif.j2 index 2e3ed41e098dc35a040e2b65306c2b5e234d33a3..564a2380019de15108f703b066c946d2e39593af 100644 --- a/roles/re2o-ldap-replica/templates/ldap/schema.ldif.j2 +++ b/roles/re2o-ldap-replica/templates/ldap/schema.ldif.j2 @@ -1,3 +1,8 @@ +{{ ansible_header | comment }} + +# This file comes from the installation of Re2o +# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/schema.ldiff + dn: cn=config objectClass: olcGlobal cn: config