crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

[sssd] Fix NSLCD template 

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
certbot_on_virtu
Yohann D'ANELLO 2021-07-11 11:11:08 +02:00 committed by ynerant
parent aff65a8267
commit e652e52733
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
group_vars/sssd.yml
View File

@ -3,17 +3,17 @@ glob_sssd:
domain: tealc.adm.crans.org domain: tealc.adm.crans.org
enumerate: "true" enumerate: "true"
servers: servers:
- "ldaps://{{ query('ldap','ip','tealc','adm') | ipv4 | first }}" - "ldaps://{{ query('ldap','ip','tealc','adm') | ipv4 | first }}/"
- "ldaps://{{ query('ldap','ip','sam','adm') | ipv4 | first }}" - "ldaps://{{ query('ldap','ip','sam','adm') | ipv4 | first }}/"
- "ldaps://{{ query('ldap','ip','daniel','adm') | ipv4 | first }}" - "ldaps://{{ query('ldap','ip','daniel','adm') | ipv4 | first }}/"
- "ldaps://{{ query('ldap','ip','jack','adm') | ipv4 | first }}" - "ldaps://{{ query('ldap','ip','jack','adm') | ipv4 | first }}/"
base: "dc=crans,dc=org" base: "dc=crans,dc=org"
secondary: secondary:
domain: re2o-ldap.adm.crans.org domain: re2o-ldap.adm.crans.org
enumerate: "false" enumerate: "false"
servers: servers:
- "ldaps://{{ query('ldap','ip','re2o-ldap','adm') | ipv4 | first }}" - "ldaps://{{ query('ldap','ip','re2o-ldap','adm') | ipv4 | first }}/"
- "ldaps://{{ query('ldap','ip','terenez','adm') | ipv4 | first }}" - "ldaps://{{ query('ldap','ip','terenez','adm') | ipv4 | first }}/"
base: "dc=crans,dc=org" base: "dc=crans,dc=org"
bind: bind:
dn: "cn=nslcd,ou=service-users,dc=crans,dc=org" dn: "cn=nslcd,ou=service-users,dc=crans,dc=org"

2
roles/sssd/templates/nslcd.conf.j2
View File

@ -9,7 +9,7 @@ gid nslcd
# The location at which the LDAP server(s) should be reachable. # The location at which the LDAP server(s) should be reachable.
{% for server in sssd.primary.servers %} {% for server in sssd.primary.servers %}
uri ldaps://{{ server }}/ uri {{ server }}
{% endfor %} {% endfor %}
# The search base that will be used for all queries. # The search base that will be used for all queries.