Srializing the restart of the LDAP servers.

diff --git a/playbooks/configure-ldap-servers.yaml b/playbooks/configure-ldap-servers.yaml
index 3873630578af9884746bf4f1645bb98489fbba40..4b8813927f1f28c4a381d0c9c52becce0dd9a09f 100644 (file)
--- a/playbooks/configure-ldap-servers.yaml
+++ b/playbooks/configure-ldap-servers.yaml
@@ -19,6 +19,13 @@
       include_role:
         name: 389ds-config-plugins
 
+- name: "Restart of the 389ds LDAP servers."
+  hosts: ldap_servers
+  gather_facts: false
+  serial: 1
+
+  tasks:
+
     - name: "Restarting the 389ds LDAP server."
       include_role:
         name: 389ds-restart

diff --git a/roles/389ds-config-plugins/tasks/account-policy.yaml b/roles/389ds-config-plugins/tasks/account-policy.yaml
index 45465467efb6e79c9d2384d136444f5204b82298..abb0201a8e79fec3dac4dfb7eac48c48a61ae2ed 100644 (file)
--- a/roles/389ds-config-plugins/tasks/account-policy.yaml
+++ b/roles/389ds-config-plugins/tasks/account-policy.yaml
@@ -80,7 +80,7 @@
 - name: 'Check for always-record-login-attr'
   set_fact:
     exec_set: true
-  when: "ds389_plugin_account_policy_always_record_login_attr is not empty ('alwaysrecordloginattr' not in acc_plugin_cfg or (acc_plugin_cfg['alwaysrecordloginattr'] != ds389_plugin_account_policy_always_record_login_attr))"
+  when: "ds389_plugin_account_policy_always_record_login_attr is not empty and ('alwaysrecordloginattr' not in acc_plugin_cfg or (acc_plugin_cfg['alwaysrecordloginattr'] != ds389_plugin_account_policy_always_record_login_attr))"
 
 - name: 'Check limit-attr for vanishing'
   set_fact:

diff --git a/roles/389ds-restart/defaults/main.yaml b/roles/389ds-restart/defaults/main.yaml
index 201408b6a6b1e94a9a6fe7112b2ea627ee8ca9a6..a072bd551c14b525204f70867b8d0318b977a696 100644 (file)
--- a/roles/389ds-restart/defaults/main.yaml
+++ b/roles/389ds-restart/defaults/main.yaml
@@ -1,5 +1,6 @@
 ---
 
 restart_389ds: false
+pause_after_restart_389ds: 10
 
 # vim: filetype=yaml

diff --git a/roles/389ds-restart/tasks/main.yaml b/roles/389ds-restart/tasks/main.yaml
index 07b717b9fdbc012556b2d9c40acc81f3b9773bdd..b54017e3d08c859a352e44c98fc112dd495fc3ac 100644 (file)
--- a/roles/389ds-restart/tasks/main.yaml
+++ b/roles/389ds-restart/tasks/main.yaml
@@ -14,5 +14,10 @@
         name: "dirsrv@{{ slapd_instance }}.service"
         state: restarted
 
+    - name: "Pause for {{ pause_after_restart_389ds }} seconds after restarting the 389ds LDAP server."
+      ansible.builtin.pause:
+        seconds: "{{ pause_after_restart_389ds }}"
+        prompt: "Waiting for Godot ..."
+
 
 # vim: filetype=yaml