ansible-roles/openldap-server/tasks/openldap_initializazion.yml

---
- name: Create a basic configuration
  debconf: name=slapd question='{{ item.question }}' value='{{ item.value }}' vtype='{{ item.vtype }}'
  with_items: '{{ slapd_debconf_params }}'
  when: openldap_service_enabled
  tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]

- name: Generate the local admin password
  shell: slappasswd -h {SSHA} -s {{ slapd_admin_pwd }} > /root/.slapdadmin ; chmod 400 /root/.slapdadmin
  args:
    creates: /root/.slapdadmin
  when: slapd_admin_pwd is defined
  register: admin_pass_file
  tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]

- name: Copy the ldif template to set the admin password
  template: src=adminpwd.ldif.j2 dest=/etc/ldap/adminpwd_ldif.tmpl
  when: slapd_admin_pwd is defined
  tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]

- name: Create the ldif file to set the admin password
  shell: ADMIN_PASS=$( cat /root/.slapdadmin ); sed -e "s/@ADMINPWD@/${ADMIN_PASS}/" /etc/ldap/adminpwd_ldif.tmpl > /etc/ldap/adminpwd.ldif ; chmod 400 /etc/ldap/adminpwd.ldif
  when: slapd_admin_pwd is defined
  tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]

- name: Finally set the admin password
  shell: ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/adminpwd.ldif
  when: ( admin_pass_file | changed )
  tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]

- name: Install some additional schemas
  shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/{{ item }} ; touch /etc/ldap/schema/.{{ item }}.installed
  args:
    creates: '/etc/ldap/schema/{{ item }}.installed'
  with_items: '{{ openldap_additional_schemas | default([]) }}'
  tags: [ 'ldap_server', 'ldap', 'ldap_conf' ]