ISTI-ansible-roles
/
ansible-roles
4
0
Fork 3
Code Issues Pull Requests Releases Wiki Activity

library/roles/nginx: New parameters to customize the ldap authentication via pam.

This commit is contained in:
Andrea Dell'Amico 2016-07-20 16:09:55 +02:00
parent f84dc3d539
commit d6e985159e
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nginx/defaults/main.yml
View File

@ -32,7 +32,8 @@ nginx_use_ldap_pam_auth: False
nginx_pam_svc_name: nginx nginx_pam_svc_name: nginx
nginx_ldap_uri: "ldap://ldap.example.org" nginx_ldap_uri: "ldap://ldap.example.org"
nginx_ldap_base_dn: "dc=example,dc=org" nginx_ldap_base_dn: "dc=example,dc=org"
# nginx_ldap_login_attribute: uid
# nginx_ldap_pam_groupdn:
nginx_letsencrypt_managed: True nginx_letsencrypt_managed: True
# Virtualhost example # Virtualhost example

7
nginx/templates/ldap.conf.j2
View File

@ -3,7 +3,12 @@ base {{ nginx_ldap_base_dn }}
# Another way to specify your LDAP server is to provide an # Another way to specify your LDAP server is to provide an
uri {{ nginx_ldap_uri }} uri {{ nginx_ldap_uri }}
if {% nginx_ldap_login_attribute is defined %}
pam_login_attribute {{ nginx_ldap_login_attribute }}
{% endif %}
if {% nginx_ldap_pam_groupdn is defined %}
pam_groupdn
{% endif %}
# The LDAP version to use (defaults to 3 # The LDAP version to use (defaults to 3
# if supported by client library) # if supported by client library)
ldap_version 3 ldap_version 3