Modify the role to support the TLS/SSL connectivity and accept the Certificate file.

[tmichett]

Modify the role to support the TLS/SSL connectivity and accept the Certificate file.

Example 15.2. Example profile: keystore section
Create keystore, import certificate chain and uncomment
if using tls.

pool.default.ssl.startTLS = true
pool.default.ssl.truststore.file = /full/path/to/myrootca.jks
pool.default.ssl.truststore.password = password

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/html-single/administration_guide/#Setting_Up_SSL_or_TLS_Connections_between_the_Manager_and_an_LDAP_Server
ISSUE TYPE

Feature Idea

COMPONENT NAME

ansible-role-ovirt-aaa-ldap
ADDITIONAL INFORMATION

This feature would complete the Role allowing full LDAPS/SSL/TLS secure communication to IdM. This is a necessary feature in public sector and any industry requiring a secure LDAP conneciton.

Place additional plays in here that would obtain the CA file and put it in a location. Also would need to have variable most likely for playbook that launches/utilizes the role.

https://github.com/machacekondra/ansible-role-ovirt-aaa-ldap/blob/master/tasks/main.yml