aboutsummaryrefslogtreecommitdiffstats
path: root/roles/freeipa_system_account
diff options
context:
space:
mode:
Diffstat (limited to 'roles/freeipa_system_account')
-rw-r--r--roles/freeipa_system_account/defaults/main.yml1
-rw-r--r--roles/freeipa_system_account/tasks/main.yml14
2 files changed, 15 insertions, 0 deletions
diff --git a/roles/freeipa_system_account/defaults/main.yml b/roles/freeipa_system_account/defaults/main.yml
new file mode 100644
index 0000000..21c0ab2
--- /dev/null
+++ b/roles/freeipa_system_account/defaults/main.yml
@@ -0,0 +1 @@
+system_account_expiration: 20380119031407Z
diff --git a/roles/freeipa_system_account/tasks/main.yml b/roles/freeipa_system_account/tasks/main.yml
new file mode 100644
index 0000000..8da9fde
--- /dev/null
+++ b/roles/freeipa_system_account/tasks/main.yml
@@ -0,0 +1,14 @@
+- name: create freeipa system account for LDAP binds
+ ldap_entry:
+ dn: 'uid={{ system_account_username }},{{ freeipa_sysaccount_basedn }}'
+ objectClass:
+ - account
+ - simplesecurityobject
+ attributes:
+ uid: '{{ system_account_username }}'
+ userPassword: '{{ system_account_password }}'
+ passwordExpirationTime: '{{ system_account_expiration }}'
+ nsIdleTimeout: 0
+ bind_dn: cn=Directory Manager
+ bind_pw: '{{ freeipa_ds_password }}'
+ server_uri: ldaps://{{ ipa_host }}