mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-29 23:08:06 +02:00
Kevin Veen-Birkenbach
cb66fb2978
- Converted group_vars/all/13_ldap.yml from lower-case to ALL-CAPS nested keys. - Updated all roles, tasks, templates, and filter_plugins to reference LDAP.* instead of ldap.*. - Fixed Keycloak JSON templates to properly quote Jinja variables. - Adjusted svc-db-openldap filter plugins and unit tests to handle new LDAP structure. - Updated integration test to only check uniqueness of TOP-LEVEL ALL-CAPS constants, ignoring nested keys. See: https://chatgpt.com/share/68b01017-efe0-800f-a508-7d7e2f1c8c8d
32 lines
1.1 KiB
YAML
32 lines
1.1 KiB
YAML
- name: "pkgmgr install"
|
|
include_role:
|
|
name: pkgmgr-install
|
|
vars:
|
|
package_name: ldapsm
|
|
|
|
- name: Ensure custom LDAP schema snippet via ldapsm
|
|
vars:
|
|
schema_name: "nextcloud"
|
|
attribute_defs:
|
|
- "( 1.3.6.1.4.1.99999.1 NAME '{{ LDAP.USER.ATTRIBUTES.NEXTCLOUD_QUOTA }}' DESC 'Quota for Nextcloud' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )"
|
|
objectclass_defs:
|
|
- "( 1.3.6.1.4.1.99999.2 NAME '{{ LDAP.USER.OBJECTS.AUXILIARY.NEXTCLOUD_USER }}' DESC 'Auxiliary class for Nextcloud attributes' AUXILIARY MAY ( {{ LDAP.USER.ATTRIBUTES.NEXTCLOUD_QUOTA }} ) )"
|
|
command: >
|
|
ldapsm
|
|
-s {{ openldap_server_uri }}
|
|
-D '{{ openldap_bind_dn }}'
|
|
-W '{{ openldap_bind_pw }}'
|
|
-n {{ schema_name }}
|
|
{% for at in attribute_defs %}
|
|
-a "{{ at }}"
|
|
{% endfor %}
|
|
{% for oc in objectclass_defs %}
|
|
-c "{{ oc }}"
|
|
{% endfor %}
|
|
register: ldapsm_result
|
|
changed_when: "'Created schema entry' in ldapsm_result.stdout"
|
|
check_mode: no
|
|
|
|
- name: Show ldapsm output
|
|
debug:
|
|
var: ldapsm_result.stdout_lines |