forked from stove/dataset
142 lines
3.9 KiB
YAML
142 lines
3.9 KiB
YAML
|
---
|
||
|
|
version: 1.1
|
||
|
|
|
||
|
|
ldap: # LDAP
|
||
|
|
|
||
|
|
prefix_domain_name:
|
||
|
|
hidden: true
|
||
|
|
provider: global:prefix_domain_name
|
||
|
|
|
||
|
|
ldap_schemas:
|
||
|
|
description: Additional LDAP schemas
|
||
|
|
mode: advanced
|
||
|
|
type: unix_filename
|
||
|
|
default:
|
||
|
|
- /etc/openldap/schema/cosine.ldif
|
||
|
|
- /etc/openldap/schema/inetorgperson.ldif
|
||
|
|
- /etc/openldap/schema/nis.ldif
|
||
|
|
- /etc/openldap/schema/misc.ldif
|
||
|
|
|
||
|
|
limits:
|
||
|
|
description: Limits
|
||
|
|
mode: advanced
|
||
|
|
|
||
|
|
ldap_loglevel: 0 # Log level
|
||
|
|
|
||
|
|
ldap_sizelimit:
|
||
|
|
description: Nombre maximum d'entrées à retourner lors d'une requête
|
||
|
|
default: 5000
|
||
|
|
|
||
|
|
ldap_timelimit:
|
||
|
|
description: Temps de réponse maximum à une requête (en secondes)
|
||
|
|
default: 3600
|
||
|
|
|
||
|
|
db_environment:
|
||
|
|
description: DB environment
|
||
|
|
mode: advanced
|
||
|
|
|
||
|
|
db_cache_size_g: 0 # Quantité de Giga-octets à utiliser pour le cache HDB
|
||
|
|
|
||
|
|
db_cache_size_o: 268435456 # Quantité d'octets à utiliser pour le cache HDB
|
||
|
|
|
||
|
|
db_cache_chunks: 1 # Nombre de fichiers ou écrire le cache HDB
|
||
|
|
|
||
|
|
db_log_region_max:
|
||
|
|
description: Quantité de fichier de cache mis en cache mémoire
|
||
|
|
default: 262144
|
||
|
|
|
||
|
|
db_log_max:
|
||
|
|
description: >-
|
||
|
|
Quantité d'informations de journalisation conservé jusqu'à rotation
|
||
|
|
default: 10485760
|
||
|
|
|
||
|
|
db_log_bsize:
|
||
|
|
description: >-
|
||
|
|
Quantité d'informations de journalisation du cache reporté sur
|
||
|
|
le disque
|
||
|
|
default: 2097152
|
||
|
|
|
||
|
|
db_log_directory:
|
||
|
|
description: Répertoire de conservation des informations de journalisation
|
||
|
|
type: unix_filename
|
||
|
|
default: /srv/openldap/log
|
||
|
|
|
||
|
|
db_lk_max_objects:
|
||
|
|
description: "Nombre d'objet qui peuvent être verrouillés simultanément "
|
||
|
|
default: 5000
|
||
|
|
|
||
|
|
db_lk_max: 5000 # Nombre de verrous maximal
|
||
|
|
|
||
|
|
db_lk_max_lockers: 5000 # Nombre de verroulleur maximal
|
||
|
|
|
||
|
|
openldap_key_file:
|
||
|
|
type: unix_filename
|
||
|
|
mandatory: false
|
||
|
|
hidden: true
|
||
|
|
|
||
|
|
ldap_user:
|
||
|
|
default:
|
||
|
|
jinja: >-
|
||
|
|
cn=admin,{{ general.ldap.ldap_base_dn }}
|
||
|
|
hidden: true
|
||
|
|
|
||
|
|
ldap_user_password:
|
||
|
|
description: Mot de passe de l'utilisateur LDAP
|
||
|
|
type: secret
|
||
|
|
default:
|
||
|
|
jinja: >-
|
||
|
|
{{ general.ldap.ldap_user |
|
||
|
|
get_password(server_name=general.network.interface_0.domain_name,
|
||
|
|
description="remote account",
|
||
|
|
type="cleartext",
|
||
|
|
hide=general.hide_secret,
|
||
|
|
temporary=true)
|
||
|
|
}}
|
||
|
|
hidden: true
|
||
|
|
|
||
|
|
ldap_base_dn:
|
||
|
|
description: Base DN
|
||
|
|
validators:
|
||
|
|
- jinja: >-
|
||
|
|
{%- set var = {'ok': false} -%}
|
||
|
|
{%- for att in ['o', 'dc', 'ou'] -%}
|
||
|
|
{%- if _.ldap_base_dn.startswith(att + '=') -%}
|
||
|
|
{%- set var = var.update({'ok': true}) -%}
|
||
|
|
{%- endif -%}
|
||
|
|
{%- endfor -%}
|
||
|
|
{%- if not var.ok -%}
|
||
|
|
{%- set e = "the LDAP base DN must starts with an " -%}
|
||
|
|
{%- set e = e + "organisation (o=), a domain componant (dc=) " -%}
|
||
|
|
{%- set e = e + "or an organizational unit (ou=)" -%}
|
||
|
|
{{ e }}
|
||
|
|
{%- endif -%}
|
||
|
|
description: >-
|
||
|
|
if LDAP base DN starts with an organisation (o=), a domain componant
|
||
|
|
(dc=) or an organizational unit (ou=)
|
||
|
|
default:
|
||
|
|
jinja: >-
|
||
|
|
{{ general.ldap.prefix_domain_name | get_default_base_dn }}
|
||
|
|
hidden: true
|
||
|
|
|
||
|
|
ldap_account_dn:
|
||
|
|
description: Base DN de l'annuaire des utilisateurs
|
||
|
|
default:
|
||
|
|
jinja: >-
|
||
|
|
{{ general.ldap.ldap_base_dn | calc_ldapclient_base_dn(base=true) }}
|
||
|
|
hidden: true
|
||
|
|
|
||
|
|
ldap_user_dn:
|
||
|
|
description: >-
|
||
|
|
Base DN de l'annuaire des utilisateurs n'appartenant à une famille
|
||
|
|
default:
|
||
|
|
jinja: >-
|
||
|
|
{{ general.ldap.ldap_base_dn | calc_ldapclient_base_dn }}
|
||
|
|
hidden: true
|
||
|
|
|
||
|
|
ldap_group_dn:
|
||
|
|
description: Base DN de l'annuaire des groupes
|
||
|
|
default:
|
||
|
|
jinja: >-
|
||
|
|
{{ general.ldap.ldap_base_dn | calc_ldapclient_base_dn(group=true) }}
|
||
|
|
hidden: true
|