diff --git a/ansible/roles/openldap_directory/tasks/groups.yaml b/ansible/roles/openldap_directory/tasks/groups.yaml index d152861..18155fe 100644 --- a/ansible/roles/openldap_directory/tasks/groups.yaml +++ b/ansible/roles/openldap_directory/tasks/groups.yaml @@ -14,21 +14,6 @@ # bind_pw: "{{ ldap_admin_pw }}" # start_tls: yes # -#- name: Ensure group memberships are correct -# community.general.ldap_attrs: -# dn: "cn={{ item.name }},ou=Groups,{{ ldap_basedn }}" -# attributes: -# memberUid: "{{ item.members }}" -# state: exact -# loop: "{{ ldap_groups }}" -# when: item.members is defined and item.members | length > 0 -# args: -# server_uri: "{{ ldap_uri }}" -# bind_dn: "{{ ldap_admin_dn }}" -# bind_pw: "{{ ldap_admin_pw }}" -# start_tls: yes -# -# - name: Ensure LDAP groups exist community.general.ldap_entry: dn: "cn={{ item.name }},ou=Groups,{{ ldap_basedn }}" @@ -46,3 +31,17 @@ bind_pw: "{{ ldap_admin_pw }}" start_tls: yes +- name: Ensure group memberships are correct + community.general.ldap_attrs: + dn: "cn={{ item.name }},ou=Groups,{{ ldap_basedn }}" + attributes: + memberUid: "{{ item.members }}" + state: exact + loop: "{{ ldap_groups }}" + when: item.members is defined and item.members | length > 0 + args: + server_uri: "{{ ldap_uri }}" + bind_dn: "{{ ldap_admin_dn }}" + bind_pw: "{{ ldap_admin_pw }}" + start_tls: yes +