don't use /export for ldap data directory on slaves
This commit is contained in:
parent
7238a595f2
commit
0163a5f932
1 changed files with 34 additions and 20 deletions
|
@ -7,27 +7,41 @@
|
||||||
- openldap-servers
|
- openldap-servers
|
||||||
- ldapvi
|
- ldapvi
|
||||||
|
|
||||||
- name: fix selinux context from ldap data directory
|
- block:
|
||||||
sefcontext:
|
- name: fix selinux context from ldap data directory
|
||||||
path: /export/ldap(/.*)?
|
sefcontext:
|
||||||
setype: slapd_db_t
|
path: /export/ldap(/.*)?
|
||||||
|
setype: slapd_db_t
|
||||||
|
- name: create ldap data directory
|
||||||
|
file:
|
||||||
|
path: /export/ldap
|
||||||
|
state: directory
|
||||||
|
mode: 0700
|
||||||
|
owner: ldap
|
||||||
|
group: ldap
|
||||||
|
- name: link ldap data directory
|
||||||
|
file:
|
||||||
|
path: /srv/ldap
|
||||||
|
src: /export/ldap
|
||||||
|
state: link
|
||||||
|
owner: root
|
||||||
|
group: root
|
||||||
|
follow: false
|
||||||
|
when: ldap_master is defined
|
||||||
|
|
||||||
- name: create ldap data directory
|
- block:
|
||||||
file:
|
- name: fix selinux context from ldap data directory
|
||||||
path: /export/ldap
|
sefcontext:
|
||||||
state: directory
|
path: /srv/ldap(/.*)?
|
||||||
mode: 0700
|
setype: slapd_db_t
|
||||||
owner: ldap
|
- name: create ldap data directory
|
||||||
group: ldap
|
file:
|
||||||
|
path: /srv/ldap
|
||||||
- name: link ldap data directory
|
state: directory
|
||||||
file:
|
mode: 0700
|
||||||
path: /srv/ldap
|
owner: ldap
|
||||||
src: /export/ldap
|
group: ldap
|
||||||
state: link
|
when: ldap_msater is not defined
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
follow: false
|
|
||||||
|
|
||||||
- name: remove nss cert databases
|
- name: remove nss cert databases
|
||||||
file:
|
file:
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue