[re2o-ldap-replica] Add some comments
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>certbot_on_virtu
parent
3e4aac76d6
commit
f0698dddcd
|
@ -11,6 +11,12 @@
|
||||||
retries: 3
|
retries: 3
|
||||||
until: apt_result is succeeded
|
until: apt_result is succeeded
|
||||||
|
|
||||||
|
# Since we can't apply same updates to the LDAP server,
|
||||||
|
# we create at the end of the deployment a file which
|
||||||
|
# indicates that the replica is installed.
|
||||||
|
# If this file is still present, then we don't redeploy
|
||||||
|
# the reploy. If it was deleted or missing, then we
|
||||||
|
# rebuild the replica.
|
||||||
- name: Check if installation was done
|
- name: Check if installation was done
|
||||||
stat:
|
stat:
|
||||||
path: /var/lib/slapd/.delete_me_to_reset_ldap_configuration
|
path: /var/lib/slapd/.delete_me_to_reset_ldap_configuration
|
||||||
|
@ -75,6 +81,7 @@
|
||||||
when: not installation.stat.exists
|
when: not installation.stat.exists
|
||||||
shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /var/lib/slapd/consumer_simple_sync.ldif
|
shell: ldapadd -Q -Y EXTERNAL -H ldapi:/// -f /var/lib/slapd/consumer_simple_sync.ldif
|
||||||
|
|
||||||
|
# LDAPS configuration
|
||||||
- name: Copy TLS certificate
|
- name: Copy TLS certificate
|
||||||
template:
|
template:
|
||||||
src: "ldap/{{ item }}.j2"
|
src: "ldap/{{ item }}.j2"
|
||||||
|
|
|
@ -1,3 +1,5 @@
|
||||||
|
{{ ansible_header | comment }}
|
||||||
|
|
||||||
dn: cn=config
|
dn: cn=config
|
||||||
add: olcTLSCertificateFile
|
add: olcTLSCertificateFile
|
||||||
olcTLSCertificateFile: /etc/ldap/ldap.pem
|
olcTLSCertificateFile: /etc/ldap/ldap.pem
|
||||||
|
|
|
@ -1,3 +1,5 @@
|
||||||
|
{{ ansible_header | comment }}
|
||||||
|
|
||||||
dn: olcDatabase={1}hdb,cn=config
|
dn: olcDatabase={1}hdb,cn=config
|
||||||
changetype: modify
|
changetype: modify
|
||||||
add: olcSyncrepl
|
add: olcSyncrepl
|
||||||
|
|
|
@ -1,3 +1,8 @@
|
||||||
|
{{ ansible_header | comment }}
|
||||||
|
|
||||||
|
# This file comes from the installation of Re2o
|
||||||
|
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/db.ldiff
|
||||||
|
|
||||||
dn: {{ re2o_ldap_replica.suffix }}
|
dn: {{ re2o_ldap_replica.suffix }}
|
||||||
o: rezo
|
o: rezo
|
||||||
structuralObjectClass: organization
|
structuralObjectClass: organization
|
||||||
|
|
|
@ -1,3 +1,8 @@
|
||||||
|
{{ ansible_header | comment }}
|
||||||
|
|
||||||
|
# This file comes from the installation of Re2o
|
||||||
|
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/schema.ldiff
|
||||||
|
|
||||||
dn: cn=config
|
dn: cn=config
|
||||||
objectClass: olcGlobal
|
objectClass: olcGlobal
|
||||||
cn: config
|
cn: config
|
||||||
|
|
Loading…
Reference in New Issue