ansible/roles/freeradius/templates/mods-available/ldap.j2

53 lines
1 KiB
Text
Raw Normal View History

{{ ansible_managed | comment }}
ldap {
2023-06-25 00:27:08 +02:00
server = "ldap://10.128.0.10"
# TODO: quand on passera en prod, créer un utilisation dédié
identity = "cn=Directory manager"
password = "MotDePasseSuperComplique"
base_dn = "ou=users,dc=auro,dc=re"
user_dn = "LDAP-UserDn"
user {
base_dn = "${..base_dn}"
filter = "{{ '(uid=%{%{Stripped-User-Name}:-%{User-Name}})' }}"
}
group {
base_dn = "${..base_dn}"
filter = "(objectClass=posixGroup)"
membership_attribute = "memberOf"
}
2023-07-02 16:45:32 +02:00
update {
reply:Tunnel-Private-Group-ID := 'radiusTunnelPrivategroupId'
}
options {
# TODO
chase_referrals = no
rebind = no
res_timeout = 10
srv_timelimit = 3
net_timeout = 1
idle = 60
probes = 3
interval = 3
ldap_debug = 0x0028
}
pool {
2023-06-25 00:27:08 +02:00
start = 0
min = 1
uses = 0
2023-06-25 00:27:08 +02:00
retry_delay = 15
lifetime = 0
idle_timeout = 60
}
}