Files @ 956d7705c012
Branch filter:

Location: majic-ansible-roles/testsite/playbooks/ldap.yml - annotation

branko
MAR-234: Use the pipreqcheck user when checking the Python version and prompt:

- Using the root account can result in incorrect permissions being set
on the Python cache (__pycache__) directories, which can further
cause permission issues for the pirpeqcheck user itself.
- The prompt also makes more sense to check in context of the virtual
environment user (since that's the one that will normally get used
with the virtual environment itself).
---

- hosts: ldap
  remote_user: ansible
  become: true
  roles:
    - common
    - mail_forwarder
    - ldap_client
    - ldap_server

- hosts: ldap
  remote_user: ansible
  become: true
  tasks:

    - name: Add users to mail LDAP group
      ldap_attr:
        dn: "cn=mail,ou=groups,{{ testsite_ldap_base }}"
        name: uniqueMember
        values:
          - "uid=johndoe,ou=people,{{ testsite_ldap_base }}"
          - "uid=janedoe,ou=people,{{ testsite_ldap_base }}"
        state: present

    - name: Add user to XMPP LDAP group
      ldap_attr:
        dn: "cn=xmpp,ou=groups,{{ testsite_ldap_base }}"
        name: uniqueMember
        values:
          - "uid=johndoe,ou=people,{{ testsite_ldap_base }}"
          - "uid=janedoe,ou=people,{{ testsite_ldap_base }}"
        state: present