dataset/seed/openldap/README.md

14 KiB

Table of Contents

openldap

Synopsis

OpenLDAP, the LDAP server.

Software's website.

This service provides a LDAP server.

It is possible to request the creation of users. Those users can be mixed or classified into families.

Those users will be created and updated. They will never be deleted. The initial password will be generated but never updated. You can modify them.

Other services may also require automatic user creation.

Variables

Accounts

Users management

Management of manually created local users. Those users are not classified. This family is a leadership.

Parameter Comments
accounts.users.ldap_user_mail
multiple
Type: mail
Email address.
An user is identify by his email address.
Example: johndoe@example.net
accounts.users.ldap_user_aliases
multiple
Type: mail
Emails aliases.
Example: jdoe@example.net
accounts.users.ldap_user_uid
mandatory
Type: unix_user
Account name.
Example: jdoe
accounts.users.ldap_user_gn
mandatory
Type: string
Given Name.
Example: John
accounts.users.ldap_user_sn
mandatory
Type: string
Surname.
Example: Doe
Parameter Comments
accounts.families
multiple
Type: unix_user
Families to create.
Users can be classified into families. This variable contains all the names of the families to be created.

Management of family suffix name

Management of manually created users. Those users an classified in a family. This a dynamic family generated from the variable "accounts.families".

Gestion des utilisateurs de la famille suffix name

This family is a leadership.

Parameter Comments
accounts.family_suffix name.users_suffix name.ldap_user_mail_suffix name
multiple
Type: mail
Adresse courriel du compte de la famille .
accounts.family_suffix name.users_suffix name.ldap_user_aliases_suffix name
multiple
Type: mail
Aliases du mail de la famille .
accounts.family_suffix name.users_suffix name.ldap_user_uid_suffix name
mandatory
Type: unix_user
Nom de compte de la famille .
accounts.family_suffix name.users_suffix name.ldap_user_sn_suffix name
mandatory
Type: string
Prénom de la famille .
accounts.family_suffix name.users_suffix name.ldap_user_gn_suffix name
mandatory
Type: string
Nom de famille de la famille .

Variables for expert

Général

LDAP

Parameter Comments
general.ldap.ldap_schemas
mandatory, multiple
Type: filename
Schémas LDAP additionnel.
Default:
  • /etc/openldap/schema/cosine.ldif
  • /etc/openldap/schema/inetorgperson.ldif
  • /etc/openldap/schema/nis.ldif
  • /etc/openldap/schema/misc.ldif
Limites
Parameter Comments
general.ldap.limits.ldap_loglevel
mandatory
Type: number
Niveau de log.
Default: 0
general.ldap.limits.ldap_sizelimit
mandatory
Type: number
Nombre maximum d'entrées à retourner lors d'une requête.
Default: 5000
general.ldap.limits.ldap_timelimit
mandatory
Type: number
Temps de réponse maximum à une requête (en secondes).
Default: 3600
DB environment
Parameter Comments
general.ldap.db_environment.db_cache_size_g
mandatory
Type: number
Quantité de Giga-octets à utiliser pour le cache HDB.
Default: 0
general.ldap.db_environment.db_cache_size_o
mandatory
Type: number
Quantité d'octets à utiliser pour le cache HDB.
Default: 268435456
general.ldap.db_environment.db_cache_chunks
mandatory
Type: number
Nombre de fichiers ou écrire le cache HDB.
Default: 1
general.ldap.db_environment.db_log_region_max
mandatory
Type: number
Quantité de fichier de cache mis en cache mémoire.
Default: 262144
general.ldap.db_environment.db_log_max
mandatory
Type: number
Quantité d'informations de journalisation conservé jusqu'à rotation.
Default: 10485760
general.ldap.db_environment.db_log_bsize
mandatory
Type: number
Quantité d'informations de journalisation du cache reporté sur le disque.
Default: 2097152
general.ldap.db_environment.db_log_directory
mandatory
Type: filename
Répertoire de conservation des informations de journalisation.
Default: /srv/openldap/log
general.ldap.db_environment.db_lk_max_objects
mandatory
Type: number
Nombre d'objet qui peuvent être verrouillés simultanément .
Default: 5000
general.ldap.db_environment.db_lk_max
mandatory
Type: number
Nombre de verrous maximal.
Default: 5000
general.ldap.db_environment.db_lk_max_lockers
mandatory
Type: number
Nombre de verroulleur maximal.
Default: 5000

Requirements services

  • LocalDNS
  • Journald

bold: provider is mandatory

Example

Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file.

openldap:
  applicationservice: openldap
  provider_zone: ldap
  zones_name:
    - localdns

Dependances

Supplier

ldap-client

All applications services for this dataset.