Râu Cao
2958ba4b81
Use *.kosmos.local hostnames for LDAP nodes
2022-11-26 16:47:28 +01:00
Râu Cao
991458208d
Use a role for configuring LDAP hostname on clients
...
This way it's also easy to converge all LDAP clients at once.
2022-11-26 16:45:45 +01:00
Râu Cao
8d4db7290e
Rename dirsrv_primary role
...
The term used in 389 docs is "supplier" instead (ex "master")
2022-11-26 16:44:05 +01:00
590366639e
Fix fresh dirsrv installs on Ubuntu 20.04
2022-04-26 20:10:51 +02:00
da3a70ef4c
WIP dirsrv changes
2021-12-02 13:56:23 -06:00
Greg Karékinian
685deea920
Simplify dirsrv setup
...
Connecting directly using zerotier, no more nginx
2021-12-02 19:08:27 +01:00
Greg Karékinian
e6b7794e20
Extract firewall definitions to their own recipe
...
This allows us to use them for KVM hosts as well. Until now we had set
up ufw rules manually on the two KVM hosts (draco and centaurus)
Refs #244
2020-12-04 16:27:42 +01:00
Greg Karékinian
a69192a863
Enable LDAP support on mediawiki
...
Users can log in using their LDAP account (in the
ou=users,dc=kosmos,dc=org group and with the wiki attribute set to
enabled)
Add an attribute for the ldap master server, so it can be overridden in
the development environment
Refs #107
2020-01-24 13:45:17 +01:00
Greg Karékinian
4e7d453942
Move the firewall and backup recipes outside of the custom resource
...
See the comment for more details
2019-12-04 17:33:41 +01:00
Greg Karékinian
dc91128eca
Use a custom resource to create a 389 Directory Server instance
...
This replaces the default recipe and will make it much easier to create
other types of instances, for example for replication
2019-11-29 14:34:52 +01:00
Greg Karékinian
9e4685a743
Initial version of the kosmos-dirsrv cookbook
...
It sets up 389 Directory Server, including a TLS cert acquired using
Let's Encrypt in production (that requires ldap.kosmos.org pointing to
the server's IP)
2019-11-15 15:41:30 +01:00
