---
- name: Ensure ACLs are configured
  community.general.ldap_attrs:
    dn: "{{ openldap_default_database_config }}"
    attributes:
      olcAccess: "{{ openldap_config_db_olc_access }}"
    state: "exact"
    server_uri: "{{ openldap_socket_url }}"
  retries: 3
  delay: 3
  register: openldap_acl_result
  until: openldap_acl_result is succeeded

- name: Ensure rootDN + credentials are correct
  community.general.ldap_attrs:
    dn: "{{ openldap_default_database_config }}"
    attributes: "{{ {entry.key: entry.value} }}"
    state: "exact"
    server_uri: "{{ openldap_socket_url }}"
  no_log: "{{ entry.log is defined and not entry.log }}"
  loop:
    - key: "olcRootDN"
      value: "{{ openldap_default_database_root_dn }}"
    - key: "olcRootPW"
      value: "{{ openldap_default_database_root_pw }"
      log: false