write ldap datadirectory handling more cleanly

This commit is contained in:
Timo Makinen 2019-05-31 18:56:24 +03:00
parent a3ea2437a3
commit 80b017b5d1
3 changed files with 22 additions and 35 deletions

View file

@ -3,4 +3,5 @@ interfaces: [[20, "52:54:00:ac:dc:1f"]]
vmhost: vmhost01.home.foo.sh vmhost: vmhost01.home.foo.sh
datadisk_size: [10] datadisk_size: [10]
ldap_datadir: /export/ldap
ldap_master: true ldap_master: true

View file

@ -1,3 +1,4 @@
--- ---
ldap_server_cert: "{% if ldap_master is defined %}ldap01.foo.sh{% else %}\ ldap_server_cert: "{% if ldap_master is defined %}ldap01.foo.sh{% else %}\
ldap.foo.sh{% endif %}" ldap.foo.sh{% endif %}"
ldap_datadir: /srv/ldap

View file

@ -7,41 +7,26 @@
- openldap-servers - openldap-servers
- ldapvi - ldapvi
- block: - name: fix selinux context from ldap data diretory
- name: fix selinux context from ldap data directory sefcontext:
sefcontext: path: "{{ ldap_datadir }}(/.*)?"
path: /export/ldap(/.*)? setype: slapd_db_t
setype: slapd_db_t - name: create ldap data directory
- name: create ldap data directory file:
file: path: "{{ ldap_datadir }}"
path: /export/ldap state: directory
state: directory mode: 0700
mode: 0700 owner: ldap
owner: ldap group: ldap
group: ldap - name: link ldap data directory
- name: link ldap data directory file:
file: path: /srv/ldap
path: /srv/ldap src: /export/ldap
src: /export/ldap state: link
state: link owner: root
owner: root group: root
group: root follow: false
follow: false when: ldap_datadir != "/srv/ldap"
when: ldap_master is defined
- block:
- name: fix selinux context from ldap data directory
sefcontext:
path: /srv/ldap(/.*)?
setype: slapd_db_t
- name: create ldap data directory
file:
path: /srv/ldap
state: directory
mode: 0700
owner: ldap
group: ldap
when: ldap_msater is not defined
- name: remove nss cert databases - name: remove nss cert databases
file: file: