crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

For the CI

certbot_on_virtu
Alexandre Iooss 2019-04-14 09:10:48 +02:00
parent 8b7f6cba14
commit 5564f48e0d
No known key found for this signature in database
GPG Key ID: 6C79278F3FCDCC02
2 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ldap.yml
View File

@ -4,7 +4,7 @@
vars: vars:
# LDAP binding # LDAP binding
ldap_base: 'dc=crans,dc=org' ldap_base: 'dc=crans,dc=org'
ldap_master_ipv4: '10.128.0.11' #TODO ldap_master_ipv4: '10.128.0.11' # TODO
ldap_master_uri: "ldap://{{ ldap_master_ipv4 }}" ldap_master_uri: "ldap://{{ ldap_master_ipv4 }}"
ldap_user_tree: "cn=Utilisateurs,{{ ldap_base }}" ldap_user_tree: "cn=Utilisateurs,{{ ldap_base }}"
ldap_nslcd_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}" ldap_nslcd_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}"
@ -14,10 +14,9 @@
intranet_url: 'https://intranet.crans.org/' intranet_url: 'https://intranet.crans.org/'
# Users in that group will be able to `sudo` # Users in that group will be able to `sudo`
sudo_group: 'sudoldap' #TODO sudo_group: 'sudoldap' # TODO
# SSH keys for root account to use when LDAP is broken # SSH keys for root account to use when LDAP is broken
ssh_pub_keys: "{{ vault_ssh_pub_keys }}" ssh_pub_keys: "{{ vault_ssh_pub_keys }}"
roles: roles:
- ldap-client - ldap-client

2
roles/ldap-client/tasks/main.yml
View File

@ -21,4 +21,4 @@
user: root user: root
key: "{{ ssh_pub_keys }}" key: "{{ ssh_pub_keys }}"
state: present state: present
exclusive: True exclusive: true