crans
/
ansible
mirror of http://gitlab.adm.crans.org/nounous/ansible.git
19
0
Fork 0
Code Issues Projects Releases Wiki Activity

[slapd] uid musts start with _

certbot_on_virtu
_benjamin 2020-12-29 16:25:22 +01:00 committed by Benjamin Graillot
parent ca0cb52cc1
commit f7b85d6214
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
roles/slapd/templates/ldap/slapd.conf.j2
View File

@ -29,6 +29,13 @@ moduleload auditlog
overlay auditlog
auditlog /var/log/openldap/auditlog.log
moduleload constraint
overlay constraint
constraint_attribute description regex ^(dhcp|dns|dns-primary|dns-secondary|ftp|gitlab|miroir|ntp|pve|radius)$
restrict=ldap:///ou=hosts,dc=crans,dc=org??one?(objectClass=device)
constraint_attribute uid regex ^_
restrict=ldap:///ou=passwd,dc=crans,dc=org??one?(objectClass=posixAccount)
moduleload syncprov
{% endif %}