Dmitriis Openldap

Learn about configurations >

• domain | string

  Default: evil.corp

  The DNS domain name is used to construct the base DN of the LDAP directory. For example, 'foo.example.org' will create the directory with 'dc=foo, dc=example, dc=org' as base DN.

• extra_packages | string

  Space separated list of extra deb packages to install.

• install_keys | string

  List of signing keys for install_sources package sources, per charmhelpers standard format (a yaml list of strings encoded as a string). The keys should be the full ASCII armoured GPG public keys. While GPG key ids are also supported and looked up on a keyserver, operators should be aware that this mechanism is insecure. null can be used if a standard package signing key is used that will already be installed on the machine, and for PPA sources where the package signing key is securely retrieved from Launchpad.

• install_sources | string

  List of extra apt sources, per charm-helpers standard format (a yaml list of strings encoded as a string). Each source may be either a line that can be added directly to sources.list(5), or in the form ppa:<user>/<ppa-name> for adding Personal Package Archives, or a distribution component to enable.

• organization | string

  Default: evilcorp

  The name of the organization to construct the base DN of the LDAP directory

• package_status | string

  Default: install

  The status of service-affecting packages will be set to this value in the dpkg database. Valid values are "install" and "hold".

• password | string

  Admin password used to create a directory. Auto-generated if not provided. Use include-file:// directives in bundles to supply that to avoid storing credentials in config.yaml

• tls_ca | string

  TLS CA used for by slapd so that clients can verify server identity. Alternatively, tls-certificates interface can be used to retrieve this certificate and a key used with it.

• tls_key | string

  TLS key to use accompanying the tls certificate in tls_ca.