diff --git a/roles/ldap_server/defaults/main.yml b/roles/ldap_server/defaults/main.yml index 1177a9c94dc8f378470068df78b46b950e418b11..ec2a72b76c43a9e4079b40dbc54e8840388e997a 100644 --- a/roles/ldap_server/defaults/main.yml +++ b/roles/ldap_server/defaults/main.yml @@ -32,3 +32,5 @@ ldap_permissions: by dn="cn=admin,{{ ldap_server_int_basedn }}" write by users read by * none + +ldap_tls_ciphers: "NONE:+VERS-TLS1.2:+CTYPE-X509:+COMP-NULL:+SIGN-RSA-SHA256:+SIGN-RSA-SHA384:+SIGN-RSA-SHA512:+DHE-RSA:+ECDHE-RSA:+SHA256:+SHA384:+AEAD:+AES-128-GCM:+AES-128-CBC:+AES-256-GCM:+AES-256-CBC:+CURVE-ALL" \ No newline at end of file