ldap van revspace, nog aanpassen

2025-04-30 21:42:38 +02:00 · 2025-04-30 21:42:38 +02:00 · a74ef0de9a
commit a74ef0de9a
parent 4870960b45
32 changed files with 964 additions and 0 deletions
--- a/roles/ldapserver/templates/olcAccess.j2
+++ b/roles/ldapserver/templates/olcAccess.j2
@ -0,0 +1,8 @@
+dn: olcDatabase={1}mdb,cn=config
+changetype: modify
+add: olcAccess
+olcAccess: {1}to attrs=loginShell,gecos
+  by dn="cn=admin,{{slapd_root}}" write
+  by self write
+  by * read
+
--- a/roles/ldapserver/templates/olcSSL.j2
+++ b/roles/ldapserver/templates/olcSSL.j2
@ -0,0 +1,15 @@
+# {{ansible_managed }}
+dn: cn=config
+changetype: modify
+replace: olcTLSCACertificateFile
+olcTLSCACertificateFile: {{slapd_certpath}}/fullchain.pem
+-
+replace: olcTLSCertificateKeyFile
+olcTLSCertificateKeyFile: {{slapd_certpath}}/privkey.pem
+-
+replace: olcTLSCertificateFile
+olcTLSCertificateFile: {{slapd_certpath}}/cert.pem
+-
+replace: olcTLSCipherSuite
+olcTLSCipherSuite: {{slapd_cipher_suite}}
+