remove iptables integration
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Robert Kaussow 2019-10-28 20:05:15 +01:00
parent 5c706acea2
commit 6f15e98158
2 changed files with 0 additions and 23 deletions

View File

@ -4,17 +4,6 @@ ldap_proxy_urls:
- "ldapi:/// ldap:///" - "ldapi:/// ldap:///"
ldap_proxy_options: [] ldap_proxy_options: []
ldap_proxy_iptables_enabled: False
ldap_proxy_open_ports:
- name: allow_ldap_out
rules: |
-A OUTPUT -m state --state NEW -p tcp --dport 389 -j ACCEPT
state: present
- name: allow_ldap_in
rules: |
-A INPUT -m state --state NEW -p tcp --dport 389 -j ACCEPT
state: present
ldap_proxy_tls_enabled: False ldap_proxy_tls_enabled: False
ldap_proxy_tls_cert_source: mycert.pem ldap_proxy_tls_cert_source: mycert.pem
ldap_proxy_tls_key_source: mykey.pem ldap_proxy_tls_key_source: mykey.pem

View File

@ -54,17 +54,5 @@
mode: 0644 mode: 0644
loop: "{{ ldap_proxy_custom_schemas }}" loop: "{{ ldap_proxy_custom_schemas }}"
notify: __slapd_restart notify: __slapd_restart
- name: Open ports in iptables
iptables_raw:
name: "{{ item.name }}"
rules: "{{ item.rules }}"
state: "{{ item.state }}"
weight: "{{ item.weight | default(omit) }}"
table: "{{ item.table | default(omit) }}"
loop: "{{ ldap_proxy_open_ports }}"
loop_control:
label: "{{ item.name }}"
when: ldap_proxy_iptables_enabled
become: True become: True
become_user: root become_user: root