diff options
| -rw-r--r-- | modules/openldap/manifests/init.pp | 9 | ||||
| -rw-r--r-- | modules/openldap/templates/slapd.conf | 10 |
2 files changed, 19 insertions, 0 deletions
diff --git a/modules/openldap/manifests/init.pp b/modules/openldap/manifests/init.pp index 6c8ea8ab..417abd21 100644 --- a/modules/openldap/manifests/init.pp +++ b/modules/openldap/manifests/init.pp @@ -60,6 +60,15 @@ class openldap { content => template("openldap/mandriva-dit-access.conf"), } + $ldap_test_password = extlookup("ldap_test_password",'x') + $ldap_test_directory = "/var/lib/ldap/test" + file { "$ldap_test_directory": + ensure => directory, + group => ldap, + owner => ldap, + mode => 644, + } + file { '/etc/openldap/slapd.conf': content => template("openldap/slapd.conf"), } diff --git a/modules/openldap/templates/slapd.conf b/modules/openldap/templates/slapd.conf index 4444e974..f2e2a9f2 100644 --- a/modules/openldap/templates/slapd.conf +++ b/modules/openldap/templates/slapd.conf @@ -108,3 +108,13 @@ access to dn.subtree="cn=Monitor" by group.exact="cn=LDAP Admins,ou=System Groups,<%= dc_suffix %>" read by * none +database bdb +suffix "dc=test_ldap" +directory /var/lib/ldap/test +rootdn "cn=manager,dc=test_ldap" +rootpw "<%= ldap_test_password %>" +authz-regexp "gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth" + "cn=manager,dc=test_ldap" +# force ssl +security ssf=56 + |