lennertmertens.389ds

Ansible role `389ds`

This Ansible role helps you install and set up a 389 Directory Server. Here’s what it does:

Installs a 389 Directory Server on RedHat systems.
Configures LDAP users and organizational units (OU) (more details coming soon).

Requirements

No specific requirements.

Role Variables

Variable	Purpose
`dirsrv_password`	Password for the directory server. Make sure to set this!
`dirsrv_admin_password`	Admin password (Default is the same as `dirsrv_password`).
`dirsrv_fqdn`	Fully Qualified Domain Name (Default is `ansible_fqdn`. If that doesn't work, set it manually).
`dirsrv_suffix`	Default is the last two parts of `dirsrv_fqdn`.
`dirsrv_hostname`	Default is the first part of `dirsrv_fqdn`.
`dirsrv_ip`	IP address of the 389 Directory Server (Default: `127.0.0.1`).
`dirsrv_remove_entries`	List of default LDAP entries to delete during installation.
`dirsrv_groups`	List of groups to create on the directory server.
`dirsrv_users`	List of users to create on the directory server.

Dependencies

The role bertvv.rh-base is needed to open the required network ports.

Prerequisites

Ensure that the necessary ports for LDAP are open:

rhbase_firewall_allow_ports:
  - 389/tcp
  - 9830/tcp
  - 636/tcp
  - 3269/tcp

Example Playbook

Remove entries

dirsrv_remove_entries:
  - "ou=Special Users,dc=green,dc=local"
  - "cn=Accounting Managers,ou=Groups,dc=green,dc=local"

Add groups

dirsrv_groups:
  - name: it
    gidnumber: 1001
    members:
      - linus
  - name: sales
    gidnumber: 1002
    members:
      - mark

Add users

dirsrv_users:
  - uid: linus
    cn: Linus
    sn: Torvalds
    description: Linus Torvalds
    password: "{SSHA}dIfwvAy7VNBkjywXaAXsgLPCiXemGegCShfPVQ==" # hash for "Test123"
    uidnumber: 700
    gidnumber: 700
    loginshell: /bin/bash
    homedirectory: /home/linus

Contributing

We welcome your feedback, feature requests, and suggestions in the Issues section.

Pull requests are encouraged. To submit a PR, create a fork of this GitHub project, then make a topic branch for your changes and push it to your fork. GitHub will help create a PR from that branch. Don’t forget to add your name to the contributor list below!