Configures LDAP authentication for a linux server using pam-ldapd and nscd.

• Ansible
  • Tested Versions:
    • 2.5
    • 2.6
    • 2.7

ansible-galaxy install git+https://github.com/joshuacherry/ansible-role-ldap.git

• Authentication against Active Directory or LDAP

For the versions available, see the tags on this repository.

Additionaly you can see what change in each version in the CHANGELOG.md file.

Look to the defaults properties file to see the possible configuration properties.

This role includes a Vagrantfile used with a Docker-based test harness. Using Vagrant allows all contributors to test on the same platform and avoid false test failures due to untested or incompatible docker versions.

1. Install Vagrant and VirtualBox.
2. Run vagrant up from the same directory as the Vagrantfile in this repository.
3. SSH into the VM with: vagrant ssh
4. Run tests with molecule.

Tox will test against the configured dependencies in tox.ini. This allows you to test the role against multiple version of ansible, molecule, python, and more. Once the dependencies are set, tox will run the same molecule command to test code.

Due to how Virtualbox mounts shared folders, it is recommended to copy the role into a local directory within the virtual machine before running tox, otherwise the python environments will perform significantly slower. Run the below commands each time you make a change to the source code and need to test against all scenarios defined in tox.ini

rsync -ua /ansible-role-ldap/ ~/ansible-role-ldap/ --delete
cd ~/ansible-role-ldap
tox

cd /ansible-role-ldap
molecule test

See molecule for more information including a full list of available commands.

You can use log into a docker image created by molecule for interactive testing with the below commands. As defined in molecule.yml, the default instance is set to ubuntu1604. If you wish to test other operating systems, you must define the environment variables MOLECULE_DISTRO and MOLECULE_DOCKER_COMMAND. A table of supported options are below.

cd /ansible-role-ldap
export MOLECULE_DISTRO=centos7
export MOLECULE_DOCKER_COMMAND=/usr/lib/systemd/systemd
molecule converge
docker exec -it instance /bin/bash

---
- hosts: all
  tasks:
  - include_role:
      name: ldap
    vars:
      ldap_uri: ldap://domain.fqdn
      ldap_base: DC=domain,DC=fqdn