39 lines
929 B
YAML
39 lines
929 B
YAML
|
|
||
|
|
- name: Install packages
|
||
|
|
apt:
|
||
|
|
name: nslcd
|
||
|
|
state: present
|
||
|
|
- name: Configure NSLCD
|
||
|
|
copy:
|
||
|
|
src: nslcd.conf
|
||
|
|
dest: /etc/nslcd.conf
|
||
|
|
owner: root
|
||
|
|
group: nslcd
|
||
|
|
mode: '0640'
|
||
|
|
backup: yes
|
||
|
|
- name: Add LDAP password to NSLCD configuration
|
||
|
|
lineinfile:
|
||
|
|
dest: /etc/nslcd.conf
|
||
|
|
regexp: "{{item.regexp}}"
|
||
|
|
line: "{{item.line}}"
|
||
|
|
state: present
|
||
|
|
with_items:
|
||
|
|
- regexp: "^bindpw"
|
||
|
|
line: "bindpw {{ bindpw_password }}"
|
||
|
|
- name: Configure nsswitch to use NSLCD
|
||
|
|
lineinfile:
|
||
|
|
dest: /etc/nsswitch.conf
|
||
|
|
regexp: "{{item.regexp}}"
|
||
|
|
line: "{{item.line}}"
|
||
|
|
state: present
|
||
|
|
with_items:
|
||
|
|
- regexp: "^passwd:"
|
||
|
|
line: "passwd: files systemd ldap"
|
||
|
|
- regexp: "^group:"
|
||
|
|
line: "group: files systemd ldap"
|
||
|
|
- name: Reconfigure PAM to use LDAP
|
||
|
|
shell: pam-auth-update --enable ldap
|
||
|
|
- name: Restart NSLCD service
|
||
|
|
service:
|
||
|
|
name: nslcd
|
||
|
|
state: restarted
|