fix access list for multimaster recipe (#14)

ltb-project · Nov 21, 2024 · 8f74d4a · 8f74d4a
1 parent 3859601
commit 8f74d4a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/playbook/multimaster.yml b/playbook/multimaster.yml
@@ -53,8 +53,8 @@
     - ldaptoolbox_olcPasswordHash: "{SSHA256}"
     # Access rights
     - ldaptoolbox_openldap_access_list:
-         - to attrs=userPassword  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" =wxd  by group/groupOfNames/member.exact="cn=admin,ou=groups,CONFIG_SUFFIX" =wxd  by self =wxd  by * auth
-         - to *  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage  by group/groupOfNames/member.exact="cn=admin,ou=groups,CONFIG_SUFFIX" write  by users read
+         - to attrs=userPassword  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" =wxd  by group/groupOfNames/member.exact="cn=admin,ou=groups,{{ ldaptoolbox_openldap_suffix }}" =wxd  by self =wxd  by * auth
+         - to *  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage  by group/groupOfNames/member.exact="cn=admin,ou=groups,{{ ldaptoolbox_openldap_suffix }}" write  by users read
     # Indexes definition
     - ldaptoolbox_openldap_database_olcDbIndexes:
          - "entryCSN,entryUUID eq"