unlimit root account by default (#5)

ltb-project · Mar 13, 2023 · 4e87162 · 4e87162
1 parent 382f532
commit 4e87162
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/tests/multimaster1.yml b/tests/multimaster1.yml
@@ -26,6 +26,7 @@
     # unlimitation for synchronization account (to be defined in data)
     - ldaptoolbox_openldap_database_olcLimits:
          - "dn.base=uid=syncrepl,ou=accounts,ou=infrastructure,{{ ldaptoolbox_openldap_suffix }} size=unlimited  time=unlimited"
+         - "dn.base=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth size=unlimited  time=unlimited"
     # ACLs from default role variables
     # Replication
     - ldaptoolbox_openldap_olcServerID: 1

diff --git a/tests/multimaster2.yml b/tests/multimaster2.yml
@@ -26,6 +26,7 @@
     # unlimitation for synchronization account (to be defined in data)
     - ldaptoolbox_openldap_database_olcLimits:
          - "dn.base=uid=syncrepl,ou=accounts,ou=infrastructure,{{ ldaptoolbox_openldap_suffix }} size=unlimited  time=unlimited"
+         - "dn.base=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth size=unlimited  time=unlimited"
     # ACLs from default role variables
     # Replication
     - ldaptoolbox_openldap_olcServerID: 2

diff --git a/tests/standalone.yml b/tests/standalone.yml
@@ -24,7 +24,8 @@
     - ldaptoolbox_openldap_monitor_olcRootDN: "cn=monitor"
     - ldaptoolbox_openldap_monitor_olcRootPW_hash: "{{ ldaptoolbox_openldap_monitor_olcRootPW_hash_vault }}"
     # No unlimitation
-    - ldaptoolbox_openldap_database_olcLimits: []
+    - ldaptoolbox_openldap_database_olcLimits:
+         - "dn.base=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth size=unlimited  time=unlimited"
     # ACLs from default role variables
     # No replication
     - ldaptoolbox_openldap_syncrepl: []