Init new ldap server role

ansible/roles/openldap_server/tasks/acls.yaml

@@ -0,0 +1,21 @@
+- name: Set LDAP ACLs
+  community.general.ldap_attrs:
+    dn: olcDatabase={2}mdb,cn=config
+    state: exact
+    attributes:
+      olcAccess:
+        - >-
+          to attrs=userPassword
+          by dn="{{ ldap_admin_dn }}" write
+          by dn="{{ ldap_bind_dn }}" read
+          by self write
+          by * none
+        - >-
+          to *
+          by dn="{{ ldap_admin_dn }}" write
+          by dn="{{ ldap_bind_dn }}" read
+          by self read
+          by * none
+  args:
+    server_uri: ldapi:///
+    sasl_mech: EXTERNAL