debops.slapd

OpenLDAP is an open source Lightweight DIrectory Access Protocol server, that can be used for centralized directory services.

The debops.slapd Ansible role can be used to install and manage OpenLDAP server (slapd) on Debian or Ubuntu hosts. The role supports easy management of the on-line configuration (OLC) used to manage slapd instances and integrates with other DebOps roles like debops.pki and debops.dhparam for additional functionality.

• Getting started
  • OpenLDAP features enabled by default
  • Access to service denied by default
  • SASL authentication
  • Authentication debugging and logs
  • Example inventory
  • Example playbook
  • Ansible tags
  • Other resources
• OpenLDAP Overlays
  • Sync Provider overlay
  • Password Policy overlay
  • Attribute Uniqueness overlay
  • Reverse Group Membership Maintenance overlay
  • Referential Integrity overlay
  • Audit Logging overlay
  • Attribute Constraints overlay
  • AutoGroup overlay
  • LastBind overlay
• Custom LDAP schemas
  • General notes
  • The rfc2307bis schema
  • The initial LDAP schemas
  • The debops schema
  • The posixgroupid schema
  • The nextuidgid schema
  • The orgstructure schema
  • The ppolicy schema
  • The ldapns schema
  • The groupofentries schema
  • The openssh-lpk schema
  • The sudo schema
  • The eduPerson schema
  • The schac schema
  • The nextcloud schema
  • The mailservice schema
  • The dyngroup schema
  • The freeradius schema
• LDAP Access Control List
  • Default security policy
  • Required LDAP schemas
  • Directory groups
  • Directory roles
  • Other directory objects
  • Current issues with the default ACL
  • Access Control List tests and validation
  • References
• Backup and restore procedures
  • Backup snapshots
  • Restore procedure
• Guide: N-Way Multi-Provider replication
  • Introduction
  • Requirements
  • DNS configuration
  • Ansible inventory configuration
  • OpenLDAP configuration tasks
  • Deployment
• Default variables
  • LDAP schemas
  • APT packages
  • OpenLDAP UNIX environment
  • LDAP database environment
  • LDAP POSIX environment
  • LDAP database tuning
  • Support for DebOps PKI and TLS
  • OpenLDAP configuration tasks
  • Backup snapshots
  • Network access to OpenLDAP server
  • LDAP Access Control List tests
  • Configuration variables for other Ansible roles
• Default variable details
  • slapd__tasks
  • slapd__slapacl_tests
• LDAP Directory Information Tree
  • Directory structure
  • Parent nodes
  • Child nodes

Copyright

debops.slapd - Manage OpenLDAP server using Ansible

Copyright (C) 2016-2020 Maciej Delmanowski <drybjed@gmail.com>
Copyright (C) 2016-2020 DebOps <https://debops.org/>
SPDX-License-Identifier: GPL-3.0-only

This Ansible role is part of DebOps.

DebOps is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 3, as
published by the Free Software Foundation.

DebOps is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with DebOps. If not, see https://www.gnu.org/licenses/.