foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add role ldap/nss

Browse source
This commit is contained in:
Timo Makinen 2019-06-10 21:05:08 +03:00
parent 998dc0b643
commit 9fc02e7bef
3 changed files with 77 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

25
roles/ldap/nss/templates/nslcd.conf.j2 Normal file
View file

@ -0,0 +1,25 @@
uid nslcd
gid ldap
uri {% for server in ldap_server %}ldaps://{{ server }} {% endfor %}
base {{ ldap_basedn }}
# time out searches after 30 seconds
timelimit 30
# close idle connections after 10 minutes
idle_timelimit 600
# do not search group memberships for local users
nss_initgroups_ignoreusers ALLLOCAL
pagesize 500
map group member uniqueMember
# use ssl and verify server cert
ssl on
tls_reqcert demand
tls_cacertfile {{ tls_bundle }}
# use local host cert/key for authentication
tls_key {{ tls_private }}/{{ inventory_hostname }}.key
tls_cert {{ tls_certs }}/{{ inventory_hostname }}.crt
sasl_mech EXTERNAL