24 lines
709 B
YAML
24 lines
709 B
YAML
---
|
|
# Plug LDAP on all servers
|
|
- hosts: all
|
|
vars:
|
|
# LDAP binding
|
|
ldap_base: 'dc=crans,dc=org'
|
|
ldap_master_ipv4: '10.128.0.11' #TODO
|
|
ldap_master_uri: "ldap://{{ ldap_master_ipv4 }}"
|
|
ldap_user_tree: "cn=Utilisateurs,{{ ldap_base }}"
|
|
ldap_nslcd_bind_dn: "cn=nslcd,ou=service-users,{{ ldap_base }}"
|
|
ldap_nslcd_passwd: "{{ vault_ldap_nslcd_passwd }}"
|
|
|
|
# Scripts will tell users to go there to manage their account
|
|
intranet_url: 'https://intranet.crans.org/'
|
|
|
|
# Users in that group will be able to `sudo`
|
|
sudo_group: 'sudoldap' #TODO
|
|
|
|
# SSH keys for root account to use when LDAP is broken
|
|
ssh_pub_keys: "{{ vault_ssh_pub_keys }}"
|
|
roles:
|
|
- ldap-client
|
|
|