README.md

Stanford ACS OpenLDAP Puppet Module

Introduction

Puppet module to manage Stanford's OpenLDAP service. Supports both traditional servers and containers.

Usage

OpenLDAP Installation and Configuration

The main class ldap supports the installation of OpenLDAP and some of its configuration. The simplest installation (which accepts all the defaults):

class { 'ldap':
}

This assumes installation on a traditional Debian server and will install whichever version of OpenLDAP is current for the that version of Debian.

Hosting Model

If you are installing onto a container, use the parameter hosting_model and set to container:

class { 'ldap':
  hosting_model => 'container',
}

The only two acceptable values for hosting_model are "traditional" and "container".

OpenLDAP Version

As mentioned above, the default is to install whichever version of OpenLDAP apt thinks should be installed. This will, of course, depend on the version of Debian underlying the host.

However, you can override this by using the install_archive and install_distro. If the distribution you want to use is already in included in /etc/apt/sources.list.d then use install_dsitribution to specify the distribution:

# Use the "testing" distribution
class { 'ldap':
  install_distribution => 'testing',
}

If the distribution is not already included in /etc/apt/sources.list.d then you need also to use install_repository. This will add a .list file into /etc/apt/sources.list.d that tells apt where to look for the distribution.

# Use the "stretch-prod" distribution.
class { 'ldap':
  install_distribution => 'stretch-prod',
  install_repository   => 'https://debian.stanford.edu/debian-stanford',
}