forked from ISTI-ansible-roles/ansible-roles
39 lines
1.6 KiB
YAML
39 lines
1.6 KiB
YAML
|
---
|
||
|
|
- name: Create a basic configuration
|
||
|
|
debconf: name=slapd question='{{ item.question }}' value='{{ item.value }}' vtype='{{ item.vtype }}'
|
||
|
|
with_items: slapd_debconf_params
|
||
|
|
when: openldap_service_enabled
|
||
|
|
tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]
|
||
|
|
|
||
|
|
- name: Generate the local admin password
|
||
|
|
shell: slappasswd -h {SSHA} -s {{ slapd_admin_pwd }} > /root/.slapdadmin ; chmod 400 /root/.slapdadmin
|
||
|
|
args:
|
||
|
|
creates: /root/.slapdadmin
|
||
|
|
when: slapd_admin_pwd is defined
|
||
|
|
register: admin_pass_file
|
||
|
|
tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]
|
||
|
|
|
||
|
|
- name: Copy the ldif template to set the admin password
|
||
|
|
template: src=adminpwd.ldif.j2 dest=/etc/ldap/adminpwd_ldif.tmpl
|
||
|
|
when: slapd_admin_pwd is defined
|
||
|
|
tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]
|
||
|
|
|
||
|
|
- name: Create the ldif file to set the admin password
|
||
|
|
shell: ADMIN_PASS=$( cat /root/.slapdadmin ); sed -e "s/@ADMINPWD@/${ADMIN_PASS}/" /etc/ldap/adminpwd_ldif.tmpl > /etc/ldap/adminpwd.ldif ; chmod 400 /etc/ldap/adminpwd.ldif
|
||
|
|
when: slapd_admin_pwd is defined
|
||
|
|
tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]
|
||
|
|
|
||
|
|
- name: Finally set the admin password
|
||
|
|
shell: ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/adminpwd.ldif
|
||
|
|
when: ( admin_pass_file | changed )
|
||
|
|
tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]
|
||
|
|
|
||
|
|
- name: Install some additional schemas
|
||
|
|
shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/{{ item }} ; touch /etc/ldap/schema/{{ item }}.installed
|
||
|
|
args:
|
||
|
|
creates: '/etc/ldap/schema/{{ item }}.installed'
|
||
|
|
with_items: openldap_additional_schemas
|
||
|
|
when: openldap_additional_schemas is defined
|
||
|
|
tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]
|
||
|
|
|
||
|
|
|