forked from spacepants/puppet-ds_389
-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathinstance.epp
213 lines (172 loc) · 9.48 KB
/
instance.epp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
;
; This is a version 2 ds setup inf file.
; It is used by the python versions of setup-ds-*
; Most options map 1 to 1 to the original .inf file.
; However, there are some differences that I envision
; For example, note the split backend section.
; You should be able to create, one, many or no backends in an install
;
; The special value {instance_name} is substituted at installation time.
;
; By default, all configuration parameters in this file are commented out.
; To use an INF file with dscreate, you must at least set the parameters
; flagged with [REQUIRED].
[general]
# config_version (int)
# Description: Sets the format version of this INF file. To use the INF file with dscreate, you must set this parameter to "2".
# Default value: 2
config_version = 2
# defaults (str)
# Description: Directory Server enables administrators to use the default values for cn=config entries from a specific version. If you set this parameter to "999999999", which is the default, the instance always uses the default values of the latest version. For example, to configure that the instance uses default values from version 1.3.5, set this parameter to "001003005". The format of this value is XXXYYYZZZ, where X is the major version, Y the minor version, and Z the patch level. Note that each part of the value uses 3 digits and must be filled with leading zeros if necessary.
# Default value: 999999999
;defaults = 999999999
# full_machine_name (str)
# Description: Sets the fully qualified hostname (FQDN) of this system. When installing this instance with GSSAPI authentication behind a load balancer, set this parameter to the FQDN of the load balancer and, additionally, set "strict_host_checking" to "false".
# Default value: ldap01.mgmt.markt.de
full_machine_name = <%= $server_host %>
# selinux (bool)
# Description: Enables SELinux detection and integration during the installation of this instance. If set to "True", dscreate auto-detects whether SELinux is enabled. Set this parameter only to "False" in a development environment.
# Default value: True
;selinux = True
# start (bool)
# Description: Starts the instance after the install completes. If false, the instance is created but started.
# Default value: True
start = True
# strict_host_checking (bool)
# Description: Sets whether the server verifies the forward and reverse record set in the "full_machine_name" parameter. When installing this instance with GSSAPI authentication behind a load balancer, set this parameter to "false". Container installs imply "false".
# Default value: False
;strict_host_checking = False
# systemd (bool)
# Description: Enables systemd platform features. If set to "True", dscreate auto-detects whether systemd is installed. Set this only to "False" in a development environment.
# Default value: True
;systemd = True
[slapd]
# backup_dir (str)
# Description: Set the backup directory of the instance.
# Default value: /var/lib/dirsrv/slapd-{instance_name}/bak
;backup_dir = /var/lib/dirsrv/slapd-{instance_name}/bak
# bin_dir (str)
# Description: Sets the location where the Directory Server binaries are stored. Only set this parameter in a development environment.
# Default value: /usr/bin
;bin_dir = /usr/bin
# cert_dir (str)
# Description: Sets the directory of the instance's Network Security Services (NSS) database.
# Default value: /etc/dirsrv/slapd-{instance_name}
;cert_dir = /etc/dirsrv/slapd-{instance_name}
# config_dir (str)
# Description: Sets the configuration directory of the instance.
# Default value: /etc/dirsrv/slapd-{instance_name}
;config_dir = /etc/dirsrv/slapd-{instance_name}
# data_dir (str)
# Description: Sets the location of Directory Server shared static data. Only set this parameter in a development environment.
# Default value: /usr/share
;data_dir = /usr/share
# db_dir (str)
# Description: Sets the database directory of the instance.
# Default value: /var/lib/dirsrv/slapd-{instance_name}/db
;db_dir = /var/lib/dirsrv/slapd-{instance_name}/db
# group (str)
# Description: Sets the group name the ns-slapd process will use after the service started.
# Default value: dirsrv
group = <%= $group %>
# initconfig_dir (str)
# Description: Sets the directory of the operating system's rc configuration directory. Only set this parameter in a development environment.
# Default value: /etc/sysconfig
;initconfig_dir = /etc/sysconfig
# inst_dir (str)
# Description: Sets the directory of instance-specific scripts.
# Default value: /usr/lib64/dirsrv/slapd-{instance_name}
;inst_dir = /usr/lib64/dirsrv/slapd-{instance_name}
# instance_name (str)
# Description: Sets the name of the instance. You can refer to this value in other parameters of this INF file using the "{instance_name}" variable. Note that this name cannot be changed after the installation!
# Default value: localhost
instance_name = <%= $server_id %>
# ldif_dir (str)
# Description: Sets the LDIF export and import directory of the instance.
# Default value: /var/lib/dirsrv/slapd-{instance_name}/ldif
;ldif_dir = /var/lib/dirsrv/slapd-{instance_name}/ldif
# lib_dir (str)
# Description: Sets the location of Directory Server shared libraries. Only set this parameter in a development environment.
# Default value: /usr/lib64
;lib_dir = /usr/lib64
# local_state_dir (str)
# Description: Sets the location of Directory Server variable data. Only set this parameter in a development environment.
# Default value: /var
;local_state_dir = /var
# lock_dir (str)
# Description: Sets the lock directory of the instance.
# Default value: /var/lock/dirsrv/slapd-{instance_name}
;lock_dir = /var/lock/dirsrv/slapd-{instance_name}
# log_dir (str)
# Description: Sets the log directory of the instance.
# Default value: /var/log/dirsrv/slapd-{instance_name}
;log_dir = /var/log/dirsrv/slapd-{instance_name}
# port (int)
# Description: Sets the TCP port the instance uses for LDAP connections.
# Default value: 389
port = <%= $server_port %>
# prefix (str)
# Description: Sets the file system prefix for all other directories. You can refer to this value in other fields using the {prefix} variable or the $PREFIX environment variable. Only set this parameter in a development environment.
# Default value: /usr
;prefix = /usr
# root_dn (str)
# Description: Sets the Distinquished Name (DN) of the administrator account for this instance.
# Default value: cn=Directory Manager
root_dn = <%= $root_dn %>
# root_password (str)
# Description: Sets the password of the account specified in the "root_dn" parameter. You can either set this parameter to a plain text password dscreate hashes during the installation or to a "{algorithm}hash" string generated by the pwdhash utility. The password must be at least 8 characters long. Note that setting a plain text password can be a security risk if unprivileged users can read this INF file!
# Default value: Directory_Manager_Password
root_password = <%= $root_dn_pass %>
# run_dir (str)
# Description: Sets PID directory of the instance.
# Default value: /var/run/dirsrv
;run_dir = /var/run/dirsrv
# sbin_dir (str)
# Description: Sets the location where the Directory Server administration binaries are stored. Only set this parameter in a development environment.
# Default value: /usr/sbin
;sbin_dir = /usr/sbin
# schema_dir (str)
# Description: Sets schema directory of the instance.
# Default value: /etc/dirsrv/slapd-{instance_name}/schema
;schema_dir = /etc/dirsrv/slapd-{instance_name}/schema
# secure_port (int)
# Description: Sets the TCP port the instance uses for TLS-secured LDAP connections (LDAPS).
# Default value: 636
secure_port = <%= $server_ssl_port %>
# self_sign_cert (bool)
# Description: Sets whether the setup creates a self-signed certificate and enables TLS encryption during the installation. This is not suitable for production, but it enables administrators to use TLS right after the installation. You can replace the self-signed certificate with a certificate issued by a Certificate Authority.
# Default value: True
self_sign_cert = False
# self_sign_cert_valid_months (int)
# Description: Set the number of months the issued self-signed certificate will be valid.
# Default value: 24
;self_sign_cert_valid_months = 24
# sysconf_dir (str)
# Description: Sets the location of the system's configuration directory. Only set this parameter in a development environment.
# Default value: /etc
;sysconf_dir = /etc
# tmp_dir (str)
# Description: Sets the temporary directory of the instance.
# Default value: /tmp
;tmp_dir = /tmp
# user (str)
# Description: Sets the user name the ns-slapd process will use after the service started.
# Default value: dirsrv
user = <%= $user %>
[backend-userroot]
# create_suffix_entry (bool)
# Description: Set this parameter to "True" to create a generic root node entry for the suffix in the database.
# Default value: False
create_suffix_entry = <%= $create_suffix %>
# require_index (bool)
# Description: Set this parameter to "True" to refuse unindexed searches in this database.
# Default value: False
;require_index = False
# sample_entries (str)
# Description: Set this parameter to 'yes' to add latest version of sample entries to this database. Or, use '001003006' to use the 1.3.6 version sample entries. Use this option, for example, to create a database for testing purposes.
# Default value: no
sample_entries = no
# suffix (str)
# Description: Sets the root suffix stored in this database. If you do not uncomment and set the suffix attribute the install process will NOT create the backend/suffix. You can also create multiple backends/suffixes by duplicating this section.
# Default value:
suffix = <%= $suffix %>