[COOK-3699] Add pptions for different OUs and TLS and password mechan…

…isms

Signed-off-by: Seth Vargo <sethvargo@gmail.com>

attributes/default.rb

@@ -18,6 +18,15 @@
 
 default['openldap']['basedn'] = "dc=localdomain"
 default['openldap']['server'] = "ldap.localdomain"
+default['openldap']['tls_enabled'] = true
+default['openldap']['password_mechanism'] = 'md5'
+
+default['openldap']['passwd_ou'] = 'people'
+default['openldap']['shadow_ou'] = 'people'
+default['openldap']['group_ou'] = 'groups'
+default['openldap']['automount_ou'] = 'automount'
+
+
 
 if node['domain'].length > 0
   default['openldap']['basedn'] = "dc=#{node['domain'].split('.').join(",dc=")}"

templates/default/ldap.conf.erb

@@ -13,14 +13,16 @@ ldap_version 3
 # Where to find data
 base <%= node['openldap']['basedn'] %>
 scope sub
-nss_base_passwd ou=people,<%= node['openldap']['basedn'] %>
-nss_base_shadow ou=people,<%= node['openldap']['basedn'] %>
-nss_base_group ou=group,<%= node['openldap']['basedn'] %>
-nss_base_automount ou=automount,<%= node['openldap']['basedn'] %>
+nss_base_passwd ou=<%= node['openldap']['passwd_ou'] %>,<%= node['openldap']['basedn'] %>
+nss_base_shadow ou=<%= node['openldap']['shadow_ou'] %>,<%= node['openldap']['basedn'] %>
+nss_base_group ou=<%= node['openldap']['group_ou'] %>,<%= node['openldap']['basedn'] %>
+nss_base_automount ou=<%= node['openldap']['automount_oi'] %>,<%= node['openldap']['basedn'] %>
 
+<% if node['openldap']['tls_enabled'] %>
 # TLS Options
 ssl start_tls
 tls_checkpeer no
+<% end %>
 
 # Password options
-pam_password md5
+pam_password <%= node['openldap']['password_mechanism'] %>