ldap_server: Add cacert path for replication

2022-02-24 23:54:37 +00:00 · 2022-02-24 23:54:37 +00:00 · 03ada9a5ed
commit 03ada9a5ed
parent 98ecd89b68
1 changed files with 1 additions and 0 deletions
--- a/roles/ldap_server/templates/slapd.conf.j2
+++ b/roles/ldap_server/templates/slapd.conf.j2
@ -98,6 +98,7 @@ syncrepl rid={{ 999 | random(seed=inventory_hostname) }}
    timelimit=360000
    schemachecking="off"
    bindmethod="simple"
+    tls_cacert="{{ tls_bundle }}"
    tls_reqcert="demand"
    binddn="uid=replicator,cn={{ inventory_hostname }},ou=Hosts,{{ ldap_basedn }}"
    credentials="{{ ldap_replicator_pass[inventory_hostname] }}"