noby/ansible
1
0
Fork 0
forked from infra/ansible
Code Issues Pull Requests Projects Releases Wiki Activity

slapd: enable password policies

Browse Source 
this will facilitate proper locking of accounts
This commit is contained in:
Markus 2024-09-11 15:06:18 +02:00
parent 0ff1611b8d
commit 3ac021d922
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
roles/slapd/templates/slapd.conf.j2
View File

@ -12,6 +12,7 @@ include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/kitchen.schema include /etc/ldap/schema/kitchen.schema
include /etc/ldap/schema/misc.schema include /etc/ldap/schema/misc.schema
include /etc/ldap/schema/namedobject.schema
include /etc/ldap/schema/nis.schema include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/openssh-lpk.schema include /etc/ldap/schema/openssh-lpk.schema
include /etc/ldap/schema/radius.schema include /etc/ldap/schema/radius.schema
@ -31,6 +32,7 @@ loglevel sync
# Load dynamic backend modules: # Load dynamic backend modules:
modulepath /usr/lib/ldap modulepath /usr/lib/ldap
moduleload back_mdb.la moduleload back_mdb.la
moduleload ppolicy.la
{% if slapd_role == 'master' %} {% if slapd_role == 'master' %}
moduleload syncprov.la moduleload syncprov.la
{% endif %} {% endif %}
@ -134,6 +136,14 @@ index mail eq
index mailAlternateAddress eq index mailAlternateAddress eq
#######################################################################
# Password Policies
#######################################################################
overlay ppolicy
ppolicy_default "cn=pp-default,ou=policies,dc=binary-kitchen,dc=de"
{% if slapd_role == 'master' %} {% if slapd_role == 'master' %}
####################################################################### #######################################################################
# Replication # Replication