tom/ansible
1
0
Fork 0
forked from infra/ansible
Code Issues Pull Requests Projects Releases Wiki Activity

slapd: use root password from vault

Browse Source
This commit is contained in:
Markus 2020-02-03 19:08:09 +01:00
parent 3e27ad3bde
commit 786ecd554f
3 changed files with 37 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
group_vars/all/vars.yml
View File

@ -98,4 +98,6 @@ root_keys:
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJBmZnJLG1WRppbLtOAJw3E4LgLRK0NirfCgpovhhU6h moepman" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJBmZnJLG1WRppbLtOAJw3E4LgLRK0NirfCgpovhhU6h moepman"
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPlktM2x11cNBMKurf57MLE1XcOm2sGQXguc0tl1vYd kishi" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINPlktM2x11cNBMKurf57MLE1XcOm2sGQXguc0tl1vYd kishi"
slapd_root_hash: "{SSHA}OB75kTfH6JRyX0dA0fM8/8ldP89qyzb+"
slapd_root_pass: "{{ vault_slapd_root_pass }}"
slapd_san: ldap.binary.kitchen slapd_san: ldap.binary.kitchen

63
group_vars/all/vault.yml
View File

@ -1,31 +1,34 @@
$ANSIBLE_VAULT;1.1;AES256 $ANSIBLE_VAULT;1.1;AES256
31343237366238376433663163356133623865613130313230646437643234343664663432343661 35656330333661626336313338653930656431376632383430306534623037363634636665343663
3961636265363434646237396335626566363437383836340a356133373037663531663565336533 6263626531383966323434623136316332316264303733320a366463616239663666366233643361
32653935623762653135366137373462313930393139633334636465366162333163333839643063 62346437326330643833346464326535383163613766303031353332366561636261306361366638
3664626436633535650a363939326433626432623338306265636566643337633561343433613666 3834313434633836610a386632336361333234333832366665663636313161643064636462393633
31656437626438356430353838653039653736316638313433343639356362646262633361393530 36353164323165613862656366396638393365633433393365643635356233303564646664633232
39646365346631636336326334613735636665653966373463636631303137356236313365313030 62633934386639353262643163323133353766616132396234346234616162616139346431663861
31313331666533323736313832363332393931613535353231616634313762323265343233656134 64316230373961656230666335366361373531643738343736613336653634613366306363623232
65363961336633656662373762353634323831663166396461363966306463363232343633663763 65653036646239613332313036366134376465623362633036343831623663613562633838313835
62386131646438353766653832626330336633633832313437613164326233356561313539333639 65393433323934633334663966616263393462383564303635323837616165366138636231373564
62363838663033653139656565323063643666343132386663336130616162393564353266383364 62373436636631373130623836333964393761343539366666633530303037393132613461363633
34613331303161366431333030303535393730663264346532316537306137366264613539633231 61653735323030636136376631373462646163343930383062356632666234353034376364653638
33396639633039656638323637396532393630353965376536356264623030633635383137333033 32343038336661343538663165333432353632633030363335333865646366393038373361623132
62346462353263656462303563326337363934623062633638356238323934343263396665303234 65363037336566633466653866336364666130343865353334383662616662613132353338643234
65303062373261393530333236313038626630356136356361663730666632366466333835643766 37346631323139316630323132656135646266356636656634376430386163636630653335376565
63613731313231363764343030623730623233623932333863333362316634636633636666353165 30303638356134323062353732353866643136613837363335613933343264356266656430343637
30623061663333353065323637336537323438633863346232663832646636343838643335363965 35333965383833396266633563616261393232386536613635313835303135303866396166616233
36393265643865353335323739313366343433343135396264643835333435326265393363313134 64363631373531623066386438323262613866303965396461323964363362393963383633643166
62663838323465343966376531313865393765373238623730636261636430623830306530313639 64353230366231326339353231393161636439303730306332306461396337376161633266383666
63363339393433663839623030393235313065626665306530306662626138343365353138366231 37623261656132393062313961633262346230323665393730386261623665346232626263383332
31373734346337386234316163623561313837316437333637373566343835666562666531353964 32646338383335633236316662643239303238623330376231316664386232646630363562346534
62306238653931393334386661336432353664646662653330353039633539383730363439366331 34626563643735356231373438376365316162396465666133646238623739333632316339393833
34306165373832373637366162643730336662386336313436306331653433626335613831636365 30383565396430396139363033653531656233303464626234386364626135386432663837353863
62353962666432633463366465346261393139366130633735616237643835666461393635613932 64303262643166623530643436346634366163373365323737643739626364353462663066616637
39333365373036333864623864383562613263323163363439613439336562636336633139386232 65663464386238656163383037656361343132346636666338646431373232393434363364333833
61346137393263303564343838316636373161666664326232623535303633393838363437663234 33386461633433323937343335653839623139633832333266323834613466383633643435383537
65336238626137383661646664353066613162313566336130313637646631366662663966363439 31393863646137356239626332356138623130656436353636353361356530623039373239376633
38373065623135316430666133393662313664306537383033646431646131356164613231656661 34626261336566366261643961353066366639363836326664363439616638313837343231663133
66663733353964353739333762623830623036393565333734386638623532636161663030353962 30663363376265393838383164663236303264323063363565323238366235373731346531363262
39306133353037366263313131396131643966326666326164393235613764383630663265353430 63366561306639323962303737336434646361623662626438306136623635623666623462373237
3866303233363833633139396138303262653962396231383535 62323232393538666137323763656162376633383566353337346433623630306362646337333734
63356435626435396634333662613839343235633031383230326262316137303539623436623830
64363738616131333831663635613739343763356362373230343064333239633534346531363963
3538

4
roles/slapd/templates/slapd.conf.j2
View File

@ -105,7 +105,7 @@ suffix "{{ ldap_base }}"
# <kbyte> <min> # <kbyte> <min>
checkpoint 32 30 checkpoint 32 30
rootdn "cn=Manager,dc=binary-kitchen,dc=de" rootdn "cn=Manager,dc=binary-kitchen,dc=de"
rootpw {SSHA}47Ywo8cJtaDsUEsV1P9kfqCA2YA212Sb rootpw {{ slapd_root_hash }}
# The database directory MUST exist prior to running slapd AND # The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools. # should only be accessible by the slapd and slap tools.
# Mode 700 recommended. # Mode 700 recommended.
@ -164,6 +164,6 @@ syncrepl rid=1
retry="5 10 30 +" retry="5 10 30 +"
binddn="cn=Manager,dc=binary-kitchen,dc=de" binddn="cn=Manager,dc=binary-kitchen,dc=de"
bindmethod=simple bindmethod=simple
credentials="aise7Aap9umu" credentials="{{ slapd_root_pass }}"
tls_reqcert=demand tls_reqcert=demand
{% endif %} {% endif %}