From 7249ebbf9237afe6cccb6069d8c910b4a5975cdf Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Tue, 19 May 2020 06:11:29 +0200
Subject: LDAP: Update role to Debian Buster.

---
 roles/LDAP-provider/tasks/main.yml | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'roles/LDAP-provider/tasks/main.yml')

diff --git a/roles/LDAP-provider/tasks/main.yml b/roles/LDAP-provider/tasks/main.yml
index af46c51..9bc227e 100644
--- a/roles/LDAP-provider/tasks/main.yml
+++ b/roles/LDAP-provider/tasks/main.yml
@@ -4,6 +4,9 @@
             target=etc/ldap/syncprov.ldif
             local=file
 
+## XXX should be /etc/sasl2/slapd.conf ideally, but it doesn't work with
+## Stretch, cf #211156 and #798462:
+##   ldapsearch -LLLx -H ldapi:// -b "" -s base supportedSASLMechanisms
 - name: Enable the EXTERNAL SASL mechanism
   lineinfile: dest=/usr/lib/sasl2/slapd.conf
               regexp='^mech_list{{':'}}'
-- 
cgit v1.2.3