ldap client.sls

/etc/pam.conf:
  file.managed:
    - user: root
    - group: sys
    - mode: 0644
    - source: salt://ldap/pam.conf
/etc/nsswitch.ldap:
  file.managed:
    - user: root
    - group: sys
    - mode: 0644
    - source: salt://ldap/nsswitch.ldap
/etc/hosts:
  file.append:
    - text:
      - 10.112.158.5      ldap1.myhost.com ldap1
      - 10.112.158.7      ldap2.myhost.com ldap2
/etc/defaultdomain:
  file.prepend:
    - text: ops.myapp.com
/home/admin:
  file.directory:
    - mode: 770
    - user: admin
    - group: staff
    - makedirs: true
/var/ldap/cert8.db:
  file.copy:
    - user: root
    - group: sys
    - mode: 700
    - source: salt://ldap/cert8.db
/var/ldap/key3.db:
  file.copy:
    - user: root
    - group: sys
    - mode: 700
    - source: salt://ldap/key3.db
/var/ldap/secmod.db:
  file.copy:
    - user: root
    - group: sys
    - mode: 700
    - source: salt://ldap/secmod.db
setup ldap client:
  cmd.run:
    - name: >
        ldapclient manual
        -a authenticationMethod=tls:simple
        -a certificatePath=/var/ldap
        -a credentialLevel=proxy
        -a proxyDN=cn=proxyagent,ou=profile,dc=ops,dc=myhost,dc=com
        -a proxyPassword={{ pillar['ldap_proxyagent_password'] }}
        -a defaultSearchBase=dc=ops,dc=myhost,dc=com
        -a preferredServerList={{ pillar['ldap_preferred_server_list'] }}
        -a defaultServerList={{ pillar['ldap_default_server_list'] }}
        -v
    - creates: /var/ldap/ldap_client_cred