[re2o-ldap-replica] Add some comments

Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
certbot_on_virtu
Yohann D'ANELLO 2021-05-13 01:36:39 +02:00
parent 3e4aac76d6
commit f0698dddcd
Signed by: _ynerant
GPG Key ID: 3A75C55819C8CF85
5 changed files with 21 additions and 0 deletions

View File

@ -11,6 +11,12 @@
retries: 3
until: apt_result is succeeded
# Since we can't apply same updates to the LDAP server,
# we create at the end of the deployment a file which
# indicates that the replica is installed.
# If this file is still present, then we don't redeploy
# the reploy. If it was deleted or missing, then we
# rebuild the replica.
- name: Check if installation was done
stat:
path: /var/lib/slapd/.delete_me_to_reset_ldap_configuration
@ -75,6 +81,7 @@
when: not installation.stat.exists
shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /var/lib/slapd/consumer_simple_sync.ldif
# LDAPS configuration
- name: Copy TLS certificate
template:
src: "ldap/{{ item }}.j2"

View File

@ -1,3 +1,5 @@
{{ ansible_header | comment }}
dn: cn=config
add: olcTLSCertificateFile
olcTLSCertificateFile: /etc/ldap/ldap.pem

View File

@ -1,3 +1,5 @@
{{ ansible_header | comment }}
dn: olcDatabase={1}hdb,cn=config
changetype: modify
add: olcSyncrepl

View File

@ -1,3 +1,8 @@
{{ ansible_header | comment }}
# This file comes from the installation of Re2o
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/db.ldiff
dn: {{ re2o_ldap_replica.suffix }}
o: rezo
structuralObjectClass: organization

View File

@ -1,3 +1,8 @@
{{ ansible_header | comment }}
# This file comes from the installation of Re2o
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/schema.ldiff
dn: cn=config
objectClass: olcGlobal
cn: config