From 0cfe680c206c7933317d82a9bb84e016123964e9 Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Thu, 19 Nov 2020 12:04:09 +0100
Subject: [PATCH] New variable to support StartTLS.
---
defaults/main.yml | 1 +
templates/epas-docker-compose.yml.j2 | 1 +
2 files changed, 2 insertions(+)
diff --git a/defaults/main.yml b/defaults/main.yml
index 977c15c..39981a3 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -47,3 +47,4 @@ epas_ldap_timeout: 1000
epas_ldap_base_dn: 'ou=People,dc=example,dc=org'
epas_ldap_login_return_uri: '/.'
epas_ldap_eppn_attribute_name: 'eduPersonPrincipalName'
+epas_ldap_starttls_enabled: 'false'
diff --git a/templates/epas-docker-compose.yml.j2 b/templates/epas-docker-compose.yml.j2
index 924d512..7e44c2a 100644
--- a/templates/epas-docker-compose.yml.j2
+++ b/templates/epas-docker-compose.yml.j2
@@ -61,6 +61,7 @@ services:
#### Autenticazione LDAP ####
- LDAP_LOGIN={{ epas_ldap_login }} # default: false. Impostare a true per attivare l'autenticazione tramite LDAP
- LDAP_URL={{ epas_ldap_url }} # url del server LDAP, per esempio ldap://ldap.cnr.it:389
+ - LDAP_STARTTLS={{ epas_ldap_starttls_enabled }} # Deve valere true quando รจ richiesto TLS sulla porta 389
- LDAP_TIMEOUT={{ epas_ldap_timeout }} # default: 1000. Time in millisecondi della connessione LDAP.
- LDAP_DN_BASE={{ epas_ldap_base_dn }} # DN per la ricerca degli utenti su LDAP, per esempio ou=People,dc=iit,dc=cnr,dc=it
- LDAP_LOGIN_RETURN={{ epas_ldap_login_return_uri }} # default: /. Indirizzo relativo di reindirizzamento dopo il login LDAP.