LDAP Directory Information Tree

This document describes how the debops.ldap Ansible role fits in the LDAP directory structure organized by DebOps.

Directory structure

• DNS (example.org)

  • rootDSE -> debops.slapd

    • dc=example,dc=org (LDAP structure tasks)

      • ou=Hosts (LDAP structure tasks)

        • dNSDomain=example.org (conditional)

          • cn=host.example.org (conditional)

            • uid=dokuwiki -> debops.dokuwiki

            • uid=dovecot -> debops.dovecot

            • uid=gitlab -> debops.gitlab

            • uid=icingaweb -> debops.icinga_web

            • uid=mailman -> debops.mailman

            • uid=netbox -> debops.netbox

            • uid=nslcd -> debops.nslcd

            • uid=nextcloud -> debops.owncloud

            • uid=nullmailer -> debops.nullmailer

            • uid=postfix -> debops.postldap

            • uid=roundcube -> debops.roundcube

            • uid=saslauthd -> debops.saslauthd

            • uid=sshd -> debops.sshd

            • uid=sssd -> debops.sssd

            • uid=sudo -> debops.sudo

      • ou=People

      • ou=Groups

        • cn=DokuWiki Administrators -> debops.dokuwiki

      • ou=Machines

      • ou=Services

      • ou=Roles

        • cn=Password Reset Agent (LDAP structure tasks)

          • roleOccupant: uid=nextcloud,cn=host.example.org,... -> debops.owncloud

Object Classes and Attributes

• dNSDomain=example.org

  • debops.ldap: Object Classes, Attributes

• cn=host.example.org

  • debops.ldap: Object Classes, Attributes

  • debops.sshd: Object Classes, Attributes (SSH host public keys)

Parent nodes

There are no parent nodes defined for the debops.ldap Ansible role.

Child nodes

• ansible_local.ldap.base_dn

• ansible_local.ldap.basedn

• ansible_local.ldap.device_dn

• ansible_local.ldap.hosts_rdn

• ansible_local.ldap.people_rdn

• ansible_local.ldap.system_groups_rdn

• ansible_local.ldap.groups_rdn

• ansible_local.ldap.machines_rdn

• ansible_local.ldap.roles_rdn

• ansible_local.ldap.services_rdn