this should all work
This commit is contained in:
@@ -1,8 +1,8 @@
|
||||
- import_tasks: install.yaml
|
||||
- import_tasks: disable_ldaps.yaml
|
||||
- import_tasks: schemas.yaml
|
||||
#- import_tasks: config.yaml
|
||||
#- import_tasks: find_database.yaml
|
||||
#- import_tasks: manager.yaml
|
||||
#- import_tasks: tls.yaml
|
||||
#- import_tasks: acls.yaml
|
||||
- import_tasks: config.yaml
|
||||
- import_tasks: find_database.yaml
|
||||
- import_tasks: manager.yaml
|
||||
- import_tasks: tls.yaml
|
||||
- import_tasks: acls.yaml
|
||||
|
||||
@@ -40,16 +40,16 @@
|
||||
# group: ldap
|
||||
# mode: '0600'
|
||||
|
||||
- name: Ensure custom LDAP schemas (sudo + openssh) are loaded
|
||||
ansible.builtin.command: >
|
||||
ldapadd -Y EXTERNAL -H ldapi:/// -f {{ item.file }}
|
||||
args:
|
||||
creates: "/etc/openldap/schema/.{{ item.name }}_loaded"
|
||||
loop:
|
||||
- { name: "sudo", file: "/etc/openldap/schema/sudo.ldif" }
|
||||
- { name: "openssh", file: "/etc/openldap/schema/openssh.ldif" }
|
||||
loop_control:
|
||||
label: "{{ item.name }}"
|
||||
#- name: Ensure custom LDAP schemas (sudo + openssh) are loaded
|
||||
# ansible.builtin.command: >
|
||||
# ldapadd -Y EXTERNAL -H ldapi:/// -f {{ item.file }}
|
||||
# args:
|
||||
# creates: "/etc/openldap/schema/.{{ item.name }}_loaded"
|
||||
# loop:
|
||||
# - { name: "sudo", file: "/etc/openldap/schema/sudo.ldif" }
|
||||
# - { name: "openssh", file: "/etc/openldap/schema/openssh.ldif" }
|
||||
# loop_control:
|
||||
# label: "{{ item.name }}"
|
||||
|
||||
# Touch marker files for idempotency (optional but recommended)
|
||||
- name: Ensure marker files exist
|
||||
|
||||
Reference in New Issue
Block a user