majic-ansible-roles Files · roles/ldap

Files @ 8d272d91d3d2

Branch filter:

Location: majic-ansible-roles/roles/ldap_client/tasks/main.yml - annotation

8d272d91d3d2 389 B text/x-yaml Show Source Show as Raw Download as Raw

branko

MAR-165: Deploy Diffie-Helman parameters for LDAP server in the ldap_server role:

- Not relevant for Debian Strech because of a bug in the OpenLDAP
version it ships with.
- This should allow use of DHE ciphers with LDAP server.
- Generated DH parameters only help pick one of the parameters from
RFC-7919 (based on the size of generated ones).
- Make the cipher test lists distro-specific due to differences
between supported algorithms in respective GnuTLS versions.

c7a0c2eb39ce
c7a0c2eb39ce
c7a0c2eb39ce
e994537dd735
e994537dd735
62014a66e35f
c7a0c2eb39ce
c7a0c2eb39ce
e994537dd735
e994537dd735
e994537dd735
e994537dd735
e994537dd735
e994537dd735
7387caca37f3
7387caca37f3
7387caca37f3
fcf5abdd3ad5
7387caca37f3
7387caca37f3

---

- name: Install OpenLDAP client tools
  apt:
    name: ldap-utils
    state: present

- name: Deploy LDAP client configuration file
  template:
    src: ldap.conf.j2
    dest: /etc/ldap/ldap.conf
    owner: root
    group: root
    mode: 0644

- name: Explicitly run all handlers
  include: ../handlers/main.yml
  when: "run_handlers | default(False) | bool()"
  tags:
    - handlers