mkouhei/ansible-role-ldap

ldap_entry LDAP attributes cannot contain comma character.

Opened this issue · 1 comments

k-d-w commented

My minimal configuration looks as following:

- ldap_entry: dn: 'cn=newgroup,ou=groups,dc=myComp,dc=com' objectClass: 'top,groupOfNames' member: 'cn=personx,ou=people,dc=myComp,dc=com'

My LDAP groups cannot be empty, hence I must set at least one member attribute when creating a group.
The member attribute is however considered to be a list of values instead of a single string.
In above example, this leads to the ldap_entry role to create 4 member attributes with values:

  • cn=personx
  • ou=people
  • dc=myComp
  • dc=com

I know this is old as hell but did you ever figure this out?