ansible-collections/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2025-07-22 12:50:22 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

Add module ldap inc (#9275)

Browse source 
* Add module ldap_inc

This module adds the ‘modify-increment’ capability corresponding to the extension implemented by OpenLdap described in RFC-4525. It can be used to increment an integer attribute and read it atomically. It is an help for posix userId definition while relying only on the directory server.

Co-authored-by: Alexei Znamensky <103110+russoz@users.noreply.github.com>
Co-authored-by: Felix Fontein <felix@fontein.de>

Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

Fix the check mode support

Check mode documentation fix

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

* Update plugins/modules/ldap_inc.py

Co-authored-by: Felix Fontein <felix@fontein.de>

---------

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
Philippe Duveau 2024-12-30 21:19:10 +01:00 • committed by GitHub
commit adb4b3c8a5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
11 changed files with 415 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tests/integration/targets/ldap_inc/aliases Normal file
View file

@ -0,0 +1,11 @@
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
azp/posix/1
skip/aix
skip/freebsd
skip/osx
skip/macos
skip/rhel
needs/root

7
tests/integration/targets/ldap_inc/meta/main.yml Normal file
View file

@ -0,0 +1,7 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
dependencies:
- setup_openldap

16
tests/integration/targets/ldap_inc/tasks/main.yml Normal file
View file

@ -0,0 +1,16 @@
---
####################################################################
# WARNING: These are designed specifically for Ansible tests #
# and should not be used as examples of how to write Ansible roles #
####################################################################
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
- name: Run LDAP search module tests
block:
- include_tasks: "{{ item }}"
with_fileglob:
- 'tests/*.yml'
when: ansible_os_family in ['Ubuntu', 'Debian']

99
tests/integration/targets/ldap_inc/tasks/tests/basic.yml Normal file
View file

@ -0,0 +1,99 @@
---
# Copyright (c) Ansible Project
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
# SPDX-License-Identifier: GPL-3.0-or-later
- debug:
msg: Running tests/basic.yml
####################################################################
## Increment #######################################################
####################################################################
- name: Test increment by default
ldap_inc:
bind_dn: "cn=admin,dc=example,dc=com"
bind_pw: "Test1234!"
dn: "cn=ldapinctest,ou=sequence,dc=example,dc=com"
attribute: "uidNumber"
ignore_errors: true
register: output
- name: assert that test increment by default
assert:
that:
- output is not failed
- output.incremented
- output.value == "1001"
- output.rfc4525
- name: Test defined increment
ldap_inc:
bind_dn: "cn=admin,dc=example,dc=com"
bind_pw: "Test1234!"
dn: "cn=ldapinctest,ou=sequence,dc=example,dc=com"
attribute: "uidNumber"
increment: 2
ignore_errors: true
register: output
- name: assert that test increment by default
assert:
that:
- output is not failed
- output.incremented
- output.value == "1003"
- output.rfc4525
- name: Test defined increment by 0
ldap_inc:
bind_dn: "cn=admin,dc=example,dc=com"
bind_pw: "Test1234!"
dn: "cn=ldapinctest,ou=sequence,dc=example,dc=com"
attribute: "uidNumber"
increment: 0
ignore_errors: true
register: output
- name: assert that test defined increment by 0
assert:
that:
- output is not failed
- output.incremented == false
- output.value == "1003"
- name: Test defined negative increment
ldap_inc:
bind_dn: "cn=admin,dc=example,dc=com"
bind_pw: "Test1234!"
dn: "cn=ldapinctest,ou=sequence,dc=example,dc=com"
attribute: "uidNumber"
increment: -1
ignore_errors: true
register: output
- name: assert that test defined negative increment
assert:
that:
- output is not failed
- output.incremented
- output.value == "1002"
- output.rfc4525
- name: Test forcing classic method instead of automatic detection
ldap_inc:
bind_dn: "cn=admin,dc=example,dc=com"
bind_pw: "Test1234!"
dn: "cn=ldapinctest,ou=sequence,dc=example,dc=com"
attribute: "uidNumber"
increment: -1
method: "legacy"
ignore_errors: true
register: output
- name: assert that test defined negative increment
assert:
that:
- output is not failed
- output.incremented
- output.value == "1001"
- output.rfc4525 == False

5
tests/integration/targets/setup_openldap/files/inc_schema_cnconfig.ldif Normal file
View file

@ -0,0 +1,5 @@
dn: cn=inc-schema,cn=schema,cn=config
changetype: add
objectClass: olcSchemaConfig
cn: inc-schema
olcObjectClasses: ( 1.3.6.1.4.1.4203.666.599 NAME 'uidNext' SUP top STRUCTURAL MUST ( cn $ uidNumber ) )

3
tests/integration/targets/setup_openldap/files/inc_schema_cnconfig.ldif.license Normal file
View file

@ -0,0 +1,3 @@
GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
SPDX-License-Identifier: GPL-3.0-or-later
SPDX-FileCopyrightText: Ansible Project

10
tests/integration/targets/setup_openldap/files/ldap_inc_config.ldif Normal file
View file

@ -0,0 +1,10 @@
dn: ou=sequence,dc=example,dc=com
objectClass: organizationalUnit
objectClass: top
ou: sequence
dn: cn=ldapinctest,ou=sequence,dc=example,dc=com
uidNumber: 1000
objectClass: top
objectClass: uidNext
cn: ldapinctest

3
tests/integration/targets/setup_openldap/files/ldap_inc_config.ldif.license Normal file
View file

@ -0,0 +1,3 @@
GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
SPDX-License-Identifier: GPL-3.0-or-later
SPDX-FileCopyrightText: Ansible Project

9
tests/integration/targets/setup_openldap/tasks/main.yml
View file

@ -79,14 +79,21 @@
- rootpw_cnconfig.ldif
- cert_cnconfig.ldif
- initial_config.ldif
- inc_schema_cnconfig.ldif
- ldap_inc_config.ldif
- name: Configure admin password for cn=config
shell: "ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/{{ item }}"
loop:
- rootpw_cnconfig.ldif
- cert_cnconfig.ldif
- inc_schema_cnconfig.ldif
- name: Add initial config
become: true
shell: 'ldapadd -H ldapi:/// -x -D "cn=admin,dc=example,dc=com" -w Test1234! -f /tmp/initial_config.ldif'
shell: 'ldapadd -H ldapi:/// -x -D "cn=admin,dc=example,dc=com" -w Test1234! -f /tmp/{{ item }}'
loop:
- initial_config.ldif
- ldap_inc_config.ldif
when: ansible_os_family in ['Ubuntu', 'Debian']