David Härdeman

Note that there's no documentation yet and the actual plugin is very lightly tested. I wanted some feedback from @drybjed first to know if the general idea is acceptable before...

> The idea looks sound. I would need to spin an LDAP environment to test it, but I trust that you use it in some capacity already and it works...

> > I can merge it now or wait for some documentation. Let me know which one you prefer. > > I think it can wait a bit, that way...

The first three patches are important (IMHO), the remaining patches are rather feature/performance related. I could split the PR in two, if that's preferable. @imrejonk : I think you'll be...

> Hi, I just came across this issue when I wanted to make another proposal: instead of using ansible `to_uuid` why not use [b64encode](https://docs.ansible.com/ansible/latest/collections/ansible/builtin/b64encode_filter.html), because this would be reverse readable....

Draft for now since I've only tested `dnsmasq` so far

Ok, now I've (lightly) tested the other roles as well. - `slapd` using the AppArmor profile from Ubuntu, fails to start without this patchset, works with it - `apt_cacher_ng` only...

@drybjed: I'll rebase the PR ASAP, meanwhile, could you have a look? I'd like to have this PR merged soon since `slapd` and `bind` are both AppArmor-enabled in Bookworm by...

Should add that it does seem to work if you haven't run the `nginx` role/playbook before, but once set it refuses to change. I think it might be that the...

Rebased on current master