ldap_server: Refactor variables
This commit is contained in:
parent
d2fb048b7d
commit
b3ebfa71e7
3 changed files with 3 additions and 2 deletions
|
@ -5,3 +5,4 @@ ldap_datadir: >-
|
||||||
{% if ansible_local['export'] %}/export{% else %}/srv{% endif %}/ldap
|
{% if ansible_local['export'] %}/export{% else %}/srv{% endif %}/ldap
|
||||||
ldap_backupdir: >-
|
ldap_backupdir: >-
|
||||||
{% if ansible_local['export'] -%}/export{% else -%}/srv{% endif -%}/backup
|
{% if ansible_local['export'] -%}/export{% else -%}/srv{% endif -%}/backup
|
||||||
|
ldap_master: false
|
||||||
|
|
|
@ -48,7 +48,7 @@
|
||||||
- name: Link LDAP data directory
|
- name: Link LDAP data directory
|
||||||
ansible.builtin.file:
|
ansible.builtin.file:
|
||||||
path: /srv/ldap
|
path: /srv/ldap
|
||||||
src: /export/ldap
|
src: "{{ ldap_datadir }}"
|
||||||
state: link
|
state: link
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
|
|
|
@ -88,7 +88,7 @@ memberof-memberof-ad memberOf
|
||||||
# access without access to clear text data
|
# access without access to clear text data
|
||||||
directory /srv/ldap
|
directory /srv/ldap
|
||||||
|
|
||||||
{% if ldap_master is not defined %}
|
{% if not ldap_master %}
|
||||||
# replication
|
# replication
|
||||||
syncrepl rid={{ 999 | random(seed=inventory_hostname) }}
|
syncrepl rid={{ 999 | random(seed=inventory_hostname) }}
|
||||||
provider=ldaps://ldap01.foo.sh
|
provider=ldaps://ldap01.foo.sh
|
||||||
|
|
Loading…
Add table
Reference in a new issue