diff --git a/group_vars/sssd.yml b/group_vars/sssd.yml index 3f826526..6787a68c 100644 --- a/group_vars/sssd.yml +++ b/group_vars/sssd.yml @@ -3,17 +3,17 @@ glob_sssd: domain: tealc.adm.crans.org enumerate: "true" servers: - - "ldaps://{{ query('ldap','ip','tealc','adm') | ipv4 | first }}" - - "ldaps://{{ query('ldap','ip','sam','adm') | ipv4 | first }}" - - "ldaps://{{ query('ldap','ip','daniel','adm') | ipv4 | first }}" - - "ldaps://{{ query('ldap','ip','jack','adm') | ipv4 | first }}" + - "ldaps://{{ query('ldap','ip','tealc','adm') | ipv4 | first }}/" + - "ldaps://{{ query('ldap','ip','sam','adm') | ipv4 | first }}/" + - "ldaps://{{ query('ldap','ip','daniel','adm') | ipv4 | first }}/" + - "ldaps://{{ query('ldap','ip','jack','adm') | ipv4 | first }}/" base: "dc=crans,dc=org" secondary: domain: re2o-ldap.adm.crans.org enumerate: "false" servers: - - "ldaps://{{ query('ldap','ip','re2o-ldap','adm') | ipv4 | first }}" - - "ldaps://{{ query('ldap','ip','terenez','adm') | ipv4 | first }}" + - "ldaps://{{ query('ldap','ip','re2o-ldap','adm') | ipv4 | first }}/" + - "ldaps://{{ query('ldap','ip','terenez','adm') | ipv4 | first }}/" base: "dc=crans,dc=org" bind: dn: "cn=nslcd,ou=service-users,dc=crans,dc=org" diff --git a/roles/sssd/templates/nslcd.conf.j2 b/roles/sssd/templates/nslcd.conf.j2 index 2360eadc..e6243203 100644 --- a/roles/sssd/templates/nslcd.conf.j2 +++ b/roles/sssd/templates/nslcd.conf.j2 @@ -9,7 +9,7 @@ gid nslcd # The location at which the LDAP server(s) should be reachable. {% for server in sssd.primary.servers %} -uri ldaps://{{ server }}/ +uri {{ server }} {% endfor %} # The search base that will be used for all queries.