14 KiB
Table of Contents
openldap
Synopsis
OpenLDAP, the LDAP server.
This service provides a LDAP server.
It is possible to request the creation of users. Those users can be mixed or classified into families.
Those users will be created and updated. They will never be deleted. The initial password will be generated but never updated. You can modify them.
Other services may also require automatic user creation.
Variables
Accounts
Users management
Management of manually created local users. Those users are not classified.. This family is a leadership.
| Parameter | Comments |
|---|---|
| accounts.users.ldap_user_mail multiple Type: mail |
Email address. An user is identify by his email address. Example: johndoe@example.net |
| accounts.users.ldap_user_aliases multiple Type: mail |
Emails aliases. Example: jdoe@example.net |
| accounts.users.ldap_user_uid mandatory Type: unix_user |
Account name. Example: jdoe |
| accounts.users.ldap_user_gn mandatory Type: string |
Given Name. Example: John |
| accounts.users.ldap_user_sn mandatory Type: string |
Surname. Example: Doe |
| Parameter | Comments |
|---|---|
| accounts.families multiple Type: unix_user |
Families to create. Users can be classified into families. This variable contains all the names of the families to be created. |
Accountssuffix name
Management of family suffix name
Management of manually created users. Those users an classified in a family.. This a dynamic family generated from the variable "accounts.families".
Gestion des utilisateurs de la famille suffix name
This family is a leadership.
| Parameter | Comments |
|---|---|
| accounts.family_suffix name.users_suffix name.ldap_user_mail_suffix name multiple Type: mail |
Adresse courriel du compte de la famille . |
| accounts.family_suffix name.users_suffix name.ldap_user_aliases_suffix name multiple Type: mail |
Aliases du mail de la famille . |
| accounts.family_suffix name.users_suffix name.ldap_user_uid_suffix name mandatory Type: unix_user |
Nom de compte de la famille . |
| accounts.family_suffix name.users_suffix name.ldap_user_sn_suffix name mandatory Type: string |
Prénom de la famille . |
| accounts.family_suffix name.users_suffix name.ldap_user_gn_suffix name mandatory Type: string |
Nom de famille de la famille . |
Variables for expert
Général
ldap
| Parameter | Comments |
|---|---|
| general.ldap.ldap_schemas mandatory, multiple Type: filename |
Schémas LDAP additionnel. Default:
|
Limites
| Parameter | Comments |
|---|---|
| general.ldap.limits.ldap_loglevel mandatory Type: number |
Niveau de log. Default: 0 |
| general.ldap.limits.ldap_sizelimit mandatory Type: number |
Nombre maximum d'entrées à retourner lors d'une requête. Default: 5000 |
| general.ldap.limits.ldap_timelimit mandatory Type: number |
Temps de réponse maximum à une requête (en secondes). Default: 3600 |
DB environment
| Parameter | Comments |
|---|---|
| general.ldap.db_environment.db_cache_size_g mandatory Type: number |
Quantité de Giga-octets à utiliser pour le cache HDB. Default: 0 |
| general.ldap.db_environment.db_cache_size_o mandatory Type: number |
Quantité d'octets à utiliser pour le cache HDB. Default: 268435456 |
| general.ldap.db_environment.db_cache_chunks mandatory Type: number |
Nombre de fichiers ou écrire le cache HDB. Default: 1 |
| general.ldap.db_environment.db_log_region_max mandatory Type: number |
Quantité de fichier de cache mis en cache mémoire. Default: 262144 |
| general.ldap.db_environment.db_log_max mandatory Type: number |
Quantité d'informations de journalisation conservé jusqu'à rotation. Default: 10485760 |
| general.ldap.db_environment.db_log_bsize mandatory Type: number |
Quantité d'informations de journalisation du cache reporté sur le disque. Default: 2097152 |
| general.ldap.db_environment.db_log_directory mandatory Type: filename |
Répertoire de conservation des informations de journalisation. Default: /srv/openldap/log |
| general.ldap.db_environment.db_lk_max_objects mandatory Type: number |
Nombre d'objet qui peuvent être verrouillés simultanément . Default: 5000 |
| general.ldap.db_environment.db_lk_max mandatory Type: number |
Nombre de verrous maximal. Default: 5000 |
| general.ldap.db_environment.db_lk_max_lockers mandatory Type: number |
Nombre de verroulleur maximal. Default: 5000 |
Requirements services
- LocalDNS
- Journald
bold: provider is mandatory
Example
Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file.
openldap:
applicationservice: openldap
provider_zone: ldap
zones_name:
- localdns