ansible-roles/openldap-server/defaults/main.yml

42 lines
1.1 KiB
YAML
Raw Normal View History

---
openldap_pkg_state: present
openldap_service_enabled: True
openldap_pkg_list:
- slapd
- ldapvi
- ldap-utils
- ldapscripts
- db-util
openldap_slapd_tcp_port: 389
openldap_slapd_ssl_port: 636
openldap_slapd_ssl_only: False
openldap_db_dir: /var/lib/ldap
# Schemas automatically added:
# core.ldif
# cosine.ldif
# inetorgperson.ldif
# nis.ldif
#openldap_additional_schemas:
# - dyngroup.ldif
openldap_cleaner_cron_job: False
openldap_letsencrypt_managed: False
openldap_letsencrypt_ldif:
- olcSSL.ldif
# Set slapd_admin_pwd in a vault file
slapd_debconf_params:
- { question: 'slapd/no_configuration', value: 'false', vtype: 'boolean' }
- { question: 'shared/organization', value: 'Organization', vtype: 'text' }
- { question: 'slapd/purge_database', value: 'false', vtype: 'boolean' }
- { question: 'slapd/allow_ldap_v2', value: 'true', vtype: 'boolean' }
- { question: 'slapd/backend', value: 'HDB', vtype: 'select' }
- { question: 'slapd/domain', value: 'DNS Domain Name', vtype: 'text' }
# openldap_allowed_clients:
# - ip/32
# - net/24