mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-29 23:08:06 +02:00
Kevin Veen-Birkenbach
cb66fb2978
- Converted group_vars/all/13_ldap.yml from lower-case to ALL-CAPS nested keys. - Updated all roles, tasks, templates, and filter_plugins to reference LDAP.* instead of ldap.*. - Fixed Keycloak JSON templates to properly quote Jinja variables. - Adjusted svc-db-openldap filter plugins and unit tests to handle new LDAP structure. - Updated integration test to only check uniqueness of TOP-LEVEL ALL-CAPS constants, ignoring nested keys. See: https://chatgpt.com/share/68b01017-efe0-800f-a508-7d7e2f1c8c8d
41 lines
1.3 KiB
YAML
41 lines
1.3 KiB
YAML
- name: Install ldapsm
|
|
include_role:
|
|
name: pkgmgr-install
|
|
vars:
|
|
package_name: ldapsm
|
|
|
|
- name: Ensure OpenSSH-LPK schema via ldapsm
|
|
vars:
|
|
schema_name: "openssh-lpk"
|
|
attribute_defs:
|
|
- "( 1.3.6.1.4.1.24552.1.1 NAME '{{ LDAP.USER.ATTRIBUTES.SSH_PUBLIC_KEY }}' DESC 'OpenSSH Public Key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )"
|
|
- "( 1.3.6.1.4.1.24552.1.2 NAME 'sshFingerprint' DESC 'OpenSSH Public Key Fingerprint' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )"
|
|
objectclass_defs:
|
|
- >-
|
|
( 1.3.6.1.4.1.24552.2.1
|
|
NAME '{{ LDAP.USER.OBJECTS.AUXILIARY.SSH_PUBLIC_KEY }}'
|
|
DESC 'Auxiliary class for OpenSSH public keys'
|
|
SUP top
|
|
AUXILIARY
|
|
MAY ( {{ LDAP.USER.ATTRIBUTES.SSH_PUBLIC_KEY }} $ sshFingerprint ) )
|
|
|
|
command: >
|
|
ldapsm
|
|
-s {{ openldap_server_uri }}
|
|
-D '{{ openldap_bind_dn }}'
|
|
-W '{{ openldap_bind_pw }}'
|
|
-n {{ schema_name }}
|
|
{% for at in attribute_defs %}
|
|
-a "{{ at }}"
|
|
{% endfor %}
|
|
{% for oc in objectclass_defs %}
|
|
-c "{{ oc }}"
|
|
{% endfor %}
|
|
register: opensshlpk_ldapsm
|
|
changed_when: "'Created schema entry' in opensshlpk_ldapsm.stdout"
|
|
check_mode: no
|
|
|
|
- name: Show ldapsm output for openssh-lpk
|
|
debug:
|
|
var: opensshlpk_ldapsm.stdout_lines
|