debops.ldap

Lightweight Directory Access Protocol is a popular and standardized protocol that permits applications to access structured data. It can be used to build and manage clustered environments with central authentication and access control based on directory services that allow efficient searching and retrieval of data.

The debops.ldap Ansible role can set up system-wide LDAP configuration on a Debian/Ubuntu host, and provide LDAP-based applications, as well as other Ansible roles, information necessary to connect them to a LDAP directory service. In addition to that, debops.ldap role can be used via Ansible inventory, or as a dependent role by other Ansible roles, to perform tasks in the LDAP directory itself, on behalf of the Ansible user.

If you are looking for a LDAP server management solution, check out the debops.slapd Ansible role that can manage OpenLDAP servers.

• Getting started
  • Ansible Controller requirements
  • LDAP directory initialization
  • Example inventory
  • Example playbook
  • Ansible tags
  • Other resources
• LDAP - POSIX environment integration
  • LDAP-POSIX support in DebOps
  • POSIX attributes
  • Reserved UID/GID ranges
  • Suggested LDAP UID/GID ranges
  • Next available UID/GID tracking
  • Collisions with local UNIX accounts/groups
• LDAP tasks and administrative operations
  • Authentication to the LDAP directory
  • Secure handling of LDAP admin credentials
  • Different modes of operation
• LDAP Access Control
  • Controlling access to LDAP objects in the directory
  • Account-based access control
  • Access control based on group membership
  • Role-based access control
  • Attribute-based access control
  • Host-based access control
• Use as a dependent role
  • LDAP directory structure organized by DebOps
• debops.ldap default variables
  • Role behaviour
  • APT packages
  • DNS and network configuration
  • LDAP directory structure
  • LDAP device object configuration
  • POSIX environment
  • Host-based access control
  • System-wide LDAP configuration
  • LDAP administrative access
  • LDAP tasks and operations
  • Configuration variables for other Ansible roles
• Default variable details
  • ldap__configuration
  • ldap__tasks
• LDAP Directory Information Tree
  • Directory structure
  • Object Classes and Attributes
  • Parent nodes
  • Child nodes

Copyright

debops.ldap - Manage system-wide LDAP configuration and directory objects

Copyright (C) 2019 Maciej Delmanowski <drybjed@gmail.com>
Copyright (C) 2019 DebOps <https://debops.org/>
SPDX-License-Identifier: GPL-3.0-only

This Ansible role is part of DebOps.

DebOps is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 3, as
published by the Free Software Foundation.

DebOps is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with DebOps. If not, see https://www.gnu.org/licenses/.