1 name 'nameservice-client-grid'
2 description 'The NameService (Kerberos and LDAP) client role for Grid'
6 'role[nameservice-client]'
9 uri = 'ldap://ldap.grid.example.com/'
10 base = 'dc=grid,dc=example,dc=com'
11 ca_cert_file = '/etc/ssl/certs/cacert.pem'
13 #env_run_lists "prod" => ["recipe[apache2]"], "staging" => ["recipe[apache2::staging]"], "_default" => []
20 'TLS_CACERT' => ca_cert_file,
21 'TLS_REQCERT' => 'allow',
22 'TLS_CHECKPEER' => 'yes',
23 'SASL_MECH' => 'GSSAPI'
29 'tls_cacertfile' => ca_cert_file,
30 'tls_reqcert' => 'demand'
32 'ldap_lookup_nameservices' => ['passwd', 'group']
36 #override_attributes "apache2" => { "max_children" => "50" }