22 lines
532 B
YAML
22 lines
532 B
YAML
- name: Set LDAP ACLs
|
|
community.general.ldap_attrs:
|
|
dn: olcDatabase={2}mdb,cn=config
|
|
state: exact
|
|
attributes:
|
|
olcAccess:
|
|
- >-
|
|
to attrs=userPassword
|
|
by dn="{{ ldap_admin_dn }}" write
|
|
by dn="{{ ldap_bind_dn }}" read
|
|
by self write
|
|
by * none
|
|
- >-
|
|
to *
|
|
by dn="{{ ldap_admin_dn }}" write
|
|
by dn="{{ ldap_bind_dn }}" read
|
|
by self read
|
|
by * none
|
|
args:
|
|
server_uri: ldapi:///
|
|
sasl_class: EXTERNAL
|