summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/ldap.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common/tasks/ldap.yml')
-rw-r--r--roles/common/tasks/ldap.yml67
1 files changed, 0 insertions, 67 deletions
diff --git a/roles/common/tasks/ldap.yml b/roles/common/tasks/ldap.yml
deleted file mode 100644
index cb1e835..0000000
--- a/roles/common/tasks/ldap.yml
+++ /dev/null
@@ -1,67 +0,0 @@
-- name: Install OpenLDAP
- apt: pkg={{ item }}
- with_items:
- - slapd
- - ldap-utils
- - ldapvi
- - db-util
- - python-ldap
-
-# Upon install slapd create and populate a database under /var/lib/ldap.
-# We clear it up and create a children directory to get finer-grain
-# control.
-- name: Clear empty /var/lib/ldap
- # Don't remove the database (and fail) if it contains something else
- # than its suffix or cn=admin,...
- openldap: dbdirectory=/var/lib/ldap ignoredn=cn=admin
- state=absent
-
-- name: Create directory /var/lib/ldap/fripost
- file: path=/var/lib/ldap/fripost
- owner=openldap group=openldap
- state=directory
- mode=0700
-
-- name: Copy /var/lib/ldap/fripost/DB_CONFIG
- copy: src=var/lib/ldap/fripost/DB_CONFIG
- dest=/var/lib/ldap/fripost/DB_CONFIG
- owner=openldap group=openldap
- mode=0600
- notify:
- # Not sure if required
- - Restart slapd
-
-- name: Create directory /etc/ldap/fripost
- file: path=/etc/ldap/fripost
- owner=root group=root
- state=directory
- mode=0755
-
-- name: Copy fripost database definition
- template: src=etc/ldap/database.ldif.j2
- dest=/etc/ldap/fripost/database.ldif
- owner=root group=root
- mode=0600
-
-- name: Copy fripost schema
- copy: src=etc/ldap/schema/fripost.ldif
- dest=/etc/ldap/schema/fripost.ldif
- owner=root group=root
- mode=0644
-
-- name: Load fripost's schema and configure the database
- openldap: target=/etc/ldap/{{ item }} state=present
- with_items:
- - schema/fripost.ldif
- # TODO load other required schemas *before* loading the database
- - fripost/database.ldif
-
-- name: Load LDAP modules
- openldap: module={{ item }}.la state=present
- with_items:
- # TODO only if provider
- - syncprov
- # TODO only if writable
- - constraint
-
-# TODO: authz constraint syncprov syncrepl