files

files/ldap-ssh-key.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+ldapsearch -h {{ldap_host}} -D "{{ldap_bind_dn}}" -w "{{ldap_bind_password}}" '(&(|(memberof=cn=host_access,ou=groups,dc=theta42,dc=com)(memberof=cn=host_{{current_host}}_access,ou=groups,dc=theta42,dc=com))(uid='"$1"'))' 'sshPublicKey' | sed -n '/^ /{H;d};/sshPublicKey:/x;$g;s/\n *//g;s/sshPublicKey: //gp'

files/sudo-ldap.conf

@@ -0,0 +1,9 @@
+BASE    dc=theta42,dc=com
+URI     ldap://{{ldap_host}}
+
+BINDDN {{ldap_bind_dn}}
+BINDPW {{ldap_bind_password}}
+
+sudoers_base dc=theta42,dc=com
+
+SUDOERS_SEARCH_FILTER (|(memberof=cn=host_admin,ou=groups,dc=theta42,dc=com)(memberof=cn=host_{{current_host}}_admin,ou=groups,dc=theta42,dc=com))