jonathan/infra
1
0
Fork 0
Code Actions Activity

this should all work

Browse Source
This commit is contained in:
Jonathan DeMasi
2026-01-24 23:55:47 -07:00
parent bb6c2032ee
commit 63da7e8ae4
2 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
ansible/roles/openldap_server/tasks/schemas.yaml
View File

@@ -40,16 +40,16 @@
# group: ldap
# mode: '0600'
- name: Ensure custom LDAP schemas (sudo + openssh) are loaded
ansible.builtin.command: >
ldapadd -Y EXTERNAL -H ldapi:/// -f {{ item.file }}
args:
creates: "/etc/openldap/schema/.{{ item.name }}_loaded"
loop:
- { name: "sudo", file: "/etc/openldap/schema/sudo.ldif" }
- { name: "openssh", file: "/etc/openldap/schema/openssh.ldif" }
loop_control:
label: "{{ item.name }}"
#- name: Ensure custom LDAP schemas (sudo + openssh) are loaded
# ansible.builtin.command: >
# ldapadd -Y EXTERNAL -H ldapi:/// -f {{ item.file }}
# args:
# creates: "/etc/openldap/schema/.{{ item.name }}_loaded"
# loop:
# - { name: "sudo", file: "/etc/openldap/schema/sudo.ldif" }
# - { name: "openssh", file: "/etc/openldap/schema/openssh.ldif" }
# loop_control:
# label: "{{ item.name }}"
# Touch marker files for idempotency (optional but recommended)
- name: Ensure marker files exist