add ca certificate definition in saslauthd configuration

Author: David Coutadeur

playbook/group_vars/prod.yml

@@ -47,3 +47,4 @@ ldaptoolbox_openldap_sasl_suffix: "dc=my-organization,dc=com"
 ldaptoolbox_openldap_sasl_servers: "ldap://localhost"
 ldaptoolbox_openldap_sasl_binddn: "cn=saslaccount,dc=my-domain,dc=com"
 ldaptoolbox_openldap_sasl_bindpw: "{{ ldaptoolbox_openldap_sasl_bindpw_vault }}"
+#ldaptoolbox_openldap_sasl_ca: "/usr/local/openldap/etc/openldap/certs/ca.crt"

templates/etc/saslauthd.conf.j2

@@ -19,6 +19,9 @@ ldap_password: {{ ldaptoolbox_openldap_sasl_bindpw }}
 
 # others
 # ----------------------------------
+{% if ldaptoolbox_openldap_sasl_ca is defined and ldaptoolbox_openldap_sasl_ca %}
+ldap_tls_cacert_file: {{ ldaptoolbox_openldap_sasl_ca }}
+{% endif %}
 ldap_deref: never
 ldap_restart: yes
 ldap_scope: sub