majic-ansible-roles Changelog /testsite/group

Changelog - /testsite/group_vars/ldap.yml @ f4ac7ec4ad7f - showing 28 out of 28 revisions

branko	f4ac7ec4ad7f	6 years ago	MAR-129: Updated testsite configuration and playbooks: MAR-129: Updated testsite configuration and playbooks: - Specify path to inventory file in testsite Ansible configuration. - Set-up group memberships in LDAP groups via separate play (since state: append does not work with stock ldap_entry - which is now used instead of m_ldap_entry). - Replace deprecated use of include with import_playbook.
branko	b56ccd5a92ee	6 years ago	MAR-129: Fixed linting errors in the test site files.
branko	922cda0a1834	8 years ago	MAR-58: Updated roles, LDAP modules, and test site to be compatible with Ansible 2.0.x and 2.1.x. Switched from using sudo/sudo_user to become/become_user. Fixed referencing of variables within roles, mainly for with_items/with_dicts calls. Improved handling of options in ldap_entry module to avoid deprecation of passing dict-like arguments to ldap_entry module. Minor fix to ldap_permissions module.
branko	1b05bae8e440	8 years ago	MAR-56: Added LDIF templates to docs for relevant roles. Added warning about freshclam/clamav service restart during initial install (need to be restarted). Switched some TLS truststore vars to use concerete values. Introduced option for specifying additional Nginx config options. Added docs for some params. Assmeble Duplicity include pattern when needed. Don't set passwords for existing system users. Fix permissions for database users to be more restrictive. Fixed a couple of default param definitions (mainly tls cert/key stuff). Updated URL for downloading Prosody LDAP plugin. Updated testsite configs.
branko	18cd76ec050d	8 years ago	MAR-51: Replaced referencing of local files for TLS keys and certificates with actual values. Documentation has been updated throughout to reflect this in both role reference and usage instructions.
branko	011f651f90ce	9 years ago	MAR-40: Updated the XMPP role to be more in the line of other roles (like mail server) by having more implicit settings/expected LDAP directory structure.Removed a number of options that are now hard-coded. Updated testsite appropriately to accomodate for this change.
branko	9f804c9501da	9 years ago	MAR-39: Added support for specifying consumers of LDAP structure to the LDAP server role. Added support to the LDAP server role for specifying groups to create. Modified the ldap_entry implementation, replacing the addattributes/replaceattributes with append/replace states. The new states allow for creation of entry if it does not exist, making them more versatille. The existing classes and configurations have been updated accordingly.
branko	d077bd1afabb	9 years ago	MAR-38: Added deploment of LDAP misc schema to LDAP server role. Updated the test site to accomodate this change (removing the LDAP entries that took care of it manually before).
branko	e29b656fbf7a	9 years ago	MAR-36: Added new option to ldap_server role for defining the LDAP administrator's password.
branko	e1f36d36827b	9 years ago	MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko	63d26c0b3d86	9 years ago	MAR-19: Simplified LDAP permissions specification for the LDAP server. Auto-calculate on which db the permissions need to be changed (instead of having user provide it). Also switched to a single tree where it can be configured. Updated the example in role reference.
branko	b325005c1a8f	9 years ago	MAR-19: Flattened the ldap server configurtion parameter provisioning (i.e. no more placeholder dictionary, instead use distinct variable names for each option).
branko	70733167cdf8	9 years ago	MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko	0f17841d0aad	9 years ago	MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko	2285dcdda345	9 years ago	MAR-11: Force use of TLS when forwarding mails to mail relay, including proper server certificate verification. Updated testsite and docs as well.
branko	96e9f230a669	9 years ago	MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko	76ed37089b33	9 years ago	MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko	9a5d1122146f	9 years ago	MAR-4: Added documentation for the mail forwarder role. Removed allowed networks for the mail forwarder role (the server is not supposed to relay mail).
branko	7ab6518de03b	9 years ago	MAR-4: Implemented mail forwarder role, to be used for sending out mails via relay from the local system. Updated testsite to use mail forwarder role for the LDAP and XMPP servers.
branko	74ed4756d5a6	9 years ago	MAR-4: Updated the main.cf Postfix configuration file. Updated available aliases in LDAP directory.
branko	233d1e763810	9 years ago	MAR-4: Added the misc schema to test site LDAP server.
branko	375f54472644	9 years ago	MAR-4: Added LDAP sub-tree for storing mail server information (domains and aliases) in test site.
branko	be262063970c	9 years ago	MAR-4: Added LDAP users for Postfix/Dovecot to test site. Added an extra group for authorisation purposes for mail server. Deploy LDAP client role to mail server.
branko	90417b999b1e	9 years ago	MAR-3: Adding the XMPP server to test site. Updated LDAP entry creation in test site to include the XMPP-related entries (service entry and group).
branko	5524a4ad9904	9 years ago	MAR-1: Set the truststore for LDAP client. Create one more LDAP entry for people. Add sn, user password, and mail to existing LDAP people entries.
branko	083df81ac1a4	9 years ago	MAR-7: Use socket for connecting to LDAP.
branko	d0a6d20f081c	9 years ago	MAR-7: Authorise the LDAP admin to manage directory as well.
branko	0c81b8598748	9 years ago	MAR-7: Added server ldap.example.com. Updated site and group variables accordingly.