write ldap datadirectory handling more cleanly

host_vars/ldap01.home.foo.sh.yml

@@ -3,4 +3,5 @@ interfaces: [[20, "52:54:00:ac:dc:1f"]]
 vmhost: vmhost01.home.foo.sh
 datadisk_size: [10]
 
+ldap_datadir: /export/ldap
 ldap_master: true

roles/ldap/server/defaults/main.yml

@@ -1,3 +1,4 @@
 ---
 ldap_server_cert: "{% if ldap_master is defined %}ldap01.foo.sh{% else %}\
  ldap.foo.sh{% endif %}"
+ldap_datadir: /srv/ldap

roles/ldap/server/tasks/main.yml

@@ -7,14 +7,13 @@
     - openldap-servers
     - ldapvi
 
-- block:
+- name: fix selinux context from ldap data diretory
-  - name: fix selinux context from ldap data directory
   sefcontext:
-      path: /export/ldap(/.*)?
+    path: "{{ ldap_datadir }}(/.*)?"
     setype: slapd_db_t
 - name: create ldap data directory
   file:
-      path: /export/ldap
+    path: "{{ ldap_datadir }}"
     state: directory
     mode: 0700
     owner: ldap
@@ -27,21 +26,7 @@
     owner: root
     group: root
     follow: false
-  when: ldap_master is defined
+  when: ldap_datadir != "/srv/ldap"
-
-- block:
-  - name: fix selinux context from ldap data directory
-    sefcontext:
-      path: /srv/ldap(/.*)?
-      setype: slapd_db_t
-  - name: create ldap data directory
-    file:
-      path: /srv/ldap
-      state: directory
-      mode: 0700
-      owner: ldap
-      group: ldap
-  when: ldap_msater is not defined
 
 - name: remove nss cert databases
   file: