Added schema

Author: djthorpe

openldap/ldif/group.ldif

@@ -0,0 +1,8 @@
+dn: cn={{ env "NOMAD_META_group" }},ou={{ env "NOMAD_META_groups" }},{{ env "NOMAD_META_basedn" }}
+cn: {{ env "NOMAD_META_group" }}
+gidNumber: {{ env "NOMAD_META_gid" }}
+objectClass: posixGroup
+objectClass: groupOfMembers
+objectClass: top
+description: {{ env "NOMAD_META_description" }}
+

openldap/ldif/root.ldif

@@ -11,6 +11,7 @@ dn: ou={{ env "NOMAD_META_groups" }},{{ env "NOMAD_META_basedn" }}
 ou: {{ env "NOMAD_META_groups" }}
 objectClass: top
 objectClass: organizationalUnit
+objectClass: groupOfMembers
 description: User groups
 
 # Users

openldap/main.tf

@@ -21,7 +21,9 @@ resource "nomad_job" "ldap" {
       ldif = jsonencode({
         "root" = file("${path.module}/ldif/root.ldif")
       })
-      schema = jsonencode({})
+      schema = jsonencode({
+        "rfc2307bis" = file("${path.module}/schema/rfc2307bis.ldif")
+      })
     }
   }
 }

openldap/nomad/openldap.hcl

@@ -60,6 +60,12 @@ variable "schema" {
   type        = map(string)
 }
 
+variable "extra_schemas" {
+  description = "Extra schemas, optional"
+  type        = string
+  default     = "cosine, inetorgperson"
+}
+
 variable "admin_password" {
   description = "LDAP admin password"
   type        = string
@@ -115,7 +121,7 @@ job "openldap" {
     network {
       port "ldap" {
         static = var.port
-        to     = 1389
+        to     = 389
       }
     }
 
@@ -165,7 +171,7 @@ job "openldap" {
         LDAP_PORT_NUMBER       = NOMAD_PORT_ldap
         LDAP_ROOT              = var.basedn
         LDAP_ADD_SCHEMAS       = "yes"
-        LDAP_EXTRA_SCHEMAS     = "cosine, inetorgperson, nis"
+        LDAP_EXTRA_SCHEMAS     = var.extra_schemas
         LDAP_SKIP_DEFAULT_TREE = "yes"
         LDAP_CUSTOM_LDIF_DIR   = local.ldif_path
         LDAP_CUSTOM_SCHEMA_DIR = local.schema_path
@@ -174,9 +180,9 @@ job "openldap" {
       config {
         image      = var.docker_image
         force_pull = var.docker_always_pull
-        volumes = compact([
-          format("%s:%s/data", var.data, local.data_path),
-        ])
+        //volumes = compact([
+        //  format("%s:%s/data", var.data, local.data_path),
+        //])
         ports = ["ldap"]
       }