Changeset - be262063970c
[Not reviewed]
0 2 1
Branko Majic (branko) - 9 years ago 2015-04-07 22:59:58
branko@majic.rs
MAR-4: Added LDAP users for Postfix/Dovecot to test site. Added an extra group for authorisation purposes for mail server. Deploy LDAP client role to mail server.
3 files changed with 31 insertions and 0 deletions:
0 comments (0 inline, 0 general)
testsite/group_vars/ldap.yml
Show inline comments
 
@@ -83,3 +83,21 @@ ldap_entries:
 
    uniqueMember:
 
      - uid=johndoe,ou=people,dc=example,dc=com
 
      - uid=janedoe,ou=people,dc=example,dc=com
 
  - dn: cn=postfix,ou=services,dc=example,dc=com
 
    objectClass:
 
      - applicationProcess
 
      - simpleSecurityObject
 
    cn: postfix
 
    userPassword: postfix
 
  - dn: cn=dovecot,ou=services,dc=example,dc=com
 
    objectClass:
 
      - applicationProcess
 
      - simpleSecurityObject
 
    cn: dovecot
 
    userPassword: dovecot
 
  - dn: cn=mail,ou=groups,dc=example,dc=com
 
    objectClass: groupOfUniqueNames
 
    cn: mail
 
    uniqueMember:
 
      - uid=johndoe,ou=people,dc=example,dc=com
 
      - uid=janedoe,ou=people,dc=example,dc=com
testsite/group_vars/mail.yml
Show inline comments
 
new file 100644
 
---
 

	
 
ldap_client_config:
 
  - comment: Set the base DN
 
    option: BASE
 
    value: dc=example,dc=com
 
  - comment: Set the default URI
 
    option: URI
 
    value: ldap://ldap.example.com/
 
  - comment: Set the LDAP TLS truststore
 
    option: TLS_CACERT
 
    value: /etc/ssl/certs/truststore.pem
testsite/playbooks/mail.yml
Show inline comments
 
@@ -5,4 +5,5 @@
 
  sudo: yes
 
  roles:
 
    - common
 
    - ldap_client
 
    - mail_server
0 comments (0 inline, 0 general)