Move ldap from denning, and get all the ldap stuff under config management.

[JasperWallace]

Can't go on adminstuff or lamarr since both use ldap themselves.

Maybe use debops.slapd? it doesn't support replication tho :/

We need the samba schema as well

[drybjed]

Hi. Work on database replication in debops.slapd is ongoing, I had to pause it to fix the SSL certificate generation so that they could work with OpenLDAP in Debian (it's compiled with GnuTLS, and OpenSSL-generated private keys wouldn't work). I plan to get back to it when I have some more time.

The current state was usable without encrypted connection, so you could try make that work if you want.

[JasperWallace]

sha2017 has some ldap ansible stuff:

https://github.com/sha2017/server.ldap
https://github.com/sha2017/server.ldap.login