puppet-openldap
puppet-openldap copied to clipboard
voxpupuli
Manage OpenLDAP with Puppet
If you already have the package openldap already defined else where with `ensure_packages(['openldap-devel', 'openldap', 'openssl'], {'ensure' => 'present'})` you get an error. ``` Failed on TARGET: Apply failed to compile...
Can this default access rules for newly created databases be added later (in `openldap::server::database`) using the `openldap::server::access` resources? https://github.com/voxpupuli/puppet-openldap/blob/ed3804fa5b25a05b648c091852ff628cc553388e/lib/puppet/provider/openldap_database/olc.rb#L264-L274 The current implementation (via the LDIF used for database creation) will...
Hello Team, Please help me on the below error. Error: ==> default: Notice: /Stage[main]/Openldap::Server::Install/Package[openldap-servers]/ensure: created ==> default: Notice: /Stage[main]/Openldap::Server::Config/Shellvar[slapd]/value: value changed ['ldapi:/// ldap:///'] to 'ldap:/// ldapi:/// ' ==> default: Notice:...
As can be seen in https://github.com/camptocamp/puppet-openldap/blob/82f3bd04b006e3c5816d5533d95cb8fd61eb7e46/lib/puppet/type/openldap_database.rb#L210 the module uses `\S+` to verify the dn of a group to set a limit. `\S` matches any non-whitespace character, but it is perfectly...
In `openldap::server::config`, if redhat 8-or-newer, there's a `systemd::dropin_file` that makes a startup file so you can tune the user `/usr/sbin/slapd` runs as. The problem is, there's a subtle assumption here...
## Affected Puppet, Ruby, OS and module versions/distributions - Puppet: 6.3.0 - Ruby: 3.3.4 - Distribution: CentOS 7 - Module version: HEAD ## How to reproduce (e.g Puppet code you...
Rehash of #397 #### Pull Request (PR) description There is an ordering in `manifests/server/database.pp`: ```puppet Class['openldap::server::service'] -> Openldap::Server::Database[$title] ``` This is subtly bad. The service (slapd) must be spun up...
#### Pull Request (PR) description I encountered an LDAP error 80 (`LDAP_OTHER`) whilst adding SSL certificates: ``` class { 'openldap::server': ssl_cert => '/etc/ssl/certs/foo.com.crt', ssl_key => '/etc/ssl/private/foo.com.key', ssl_ca => '/etc/ssl/certs/foo.com.ca-bundle', }...
The database `readonly` property expects a boolean, but the olc provider doesn't take care to parse the existing value into a boolean, thus leading to issues. Simply applies the same...
