[re2o-ldap-replica] Add some comments
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>certbot_on_virtu
parent
3e4aac76d6
commit
f0698dddcd
|
@ -11,6 +11,12 @@
|
|||
retries: 3
|
||||
until: apt_result is succeeded
|
||||
|
||||
# Since we can't apply same updates to the LDAP server,
|
||||
# we create at the end of the deployment a file which
|
||||
# indicates that the replica is installed.
|
||||
# If this file is still present, then we don't redeploy
|
||||
# the reploy. If it was deleted or missing, then we
|
||||
# rebuild the replica.
|
||||
- name: Check if installation was done
|
||||
stat:
|
||||
path: /var/lib/slapd/.delete_me_to_reset_ldap_configuration
|
||||
|
@ -75,6 +81,7 @@
|
|||
when: not installation.stat.exists
|
||||
shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /var/lib/slapd/consumer_simple_sync.ldif
|
||||
|
||||
# LDAPS configuration
|
||||
- name: Copy TLS certificate
|
||||
template:
|
||||
src: "ldap/{{ item }}.j2"
|
||||
|
|
|
@ -1,3 +1,5 @@
|
|||
{{ ansible_header | comment }}
|
||||
|
||||
dn: cn=config
|
||||
add: olcTLSCertificateFile
|
||||
olcTLSCertificateFile: /etc/ldap/ldap.pem
|
||||
|
|
|
@ -1,3 +1,5 @@
|
|||
{{ ansible_header | comment }}
|
||||
|
||||
dn: olcDatabase={1}hdb,cn=config
|
||||
changetype: modify
|
||||
add: olcSyncrepl
|
||||
|
|
|
@ -1,3 +1,8 @@
|
|||
{{ ansible_header | comment }}
|
||||
|
||||
# This file comes from the installation of Re2o
|
||||
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/db.ldiff
|
||||
|
||||
dn: {{ re2o_ldap_replica.suffix }}
|
||||
o: rezo
|
||||
structuralObjectClass: organization
|
||||
|
|
|
@ -1,3 +1,8 @@
|
|||
{{ ansible_header | comment }}
|
||||
|
||||
# This file comes from the installation of Re2o
|
||||
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/schema.ldiff
|
||||
|
||||
dn: cn=config
|
||||
objectClass: olcGlobal
|
||||
cn: config
|
||||
|
|
Loading…
Reference in New Issue