force starttls only

2026-01-23 19:00:40 -07:00
parent 37017b9f8a
commit 2b1a5ee3f9
2 changed files with 15 additions and 0 deletions
--- a/ansible/roles/openldap_server/tasks/disable_ldaps.yaml
+++ b/ansible/roles/openldap_server/tasks/disable_ldaps.yaml
@@ -0,0 +1,14 @@
+- name: Create systemd override directory for slapd
+  file:
+    path: /etc/systemd/system/slapd.service.d
+    state: directory
+    mode: '0755'
+
+- name: Configure slapd listeners (LDAP + LDAPI only)
+  copy:
+    dest: /etc/systemd/system/slapd.service.d/override.conf
+    mode: '0644'
+    content: |
+      [Service]
+      ExecStart=
+      ExecStart=/usr/sbin/slapd -u ldap -g ldap -h "ldap:/// ldapi:///"