diff --git a/hosts b/hosts index bdffb4d..25fcbb3 100644 --- a/hosts +++ b/hosts @@ -159,6 +159,12 @@ gs_pve #dns-edc.adm.auro.re #dns-gs.adm.auro.re +[ldap_replica] +ldap_replica_fleming +ldap_replica_pacaterie +ldap_replica_edc +ldap_replica_gs + [ldap_replica_fleming] ldap-replica-fleming.adm.auro.re ldap-replica-fleming-backup.adm.auro.re @@ -166,3 +172,11 @@ ldap-replica-fleming-backup.adm.auro.re [ldap_replica_pacaterie] ldap-replica-pacaterie.adm.auro.re ldap-replica-pacaterie-backup.adm.auro.re + +[ldap_replica_edc] +ldap-replica-edc.adm.auro.re +ldap-replica-edc-backup.adm.auro.re + +[ldap_replica_gs] +ldap-replica-gs.adm.auro.re +ldap-replica-gs-backup.adm.auro.re diff --git a/roles/ldap-client/templates/nslcd.conf.j2 b/roles/ldap-client/templates/nslcd.conf.j2 index ab8d556..bd256dc 100644 --- a/roles/ldap-client/templates/nslcd.conf.j2 +++ b/roles/ldap-client/templates/nslcd.conf.j2 @@ -15,6 +15,16 @@ uri {{ uri }} uri ldap://{{ uri }} {% endfor %} {% endif %} +{% if 'edc_vm' in group_names or 'edc_pve' in group_names %} +{% for uri in groups['ldap_replica_edc'] %} +uri {{ uri }} +{% endfor %} +{% endif %} +{% if 'gs_vm' in group_names or 'gs_pve' in group_names %} +{% for uri in groups['ldap_replica_gs'] %} +uri {{ uri }} +{% endfor %} +{% endif %} uri {{ ldap_master_uri }} # The search base that will be used for all queries. @@ -40,4 +50,3 @@ tls_cacertfile /etc/ssl/certs/ca-certificates.crt # The search scope. #scope sub -