You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
- include_tasks: install_{{ ansible_os_family }}.yml
|
|
|
|
|
|
|
|
|
|
- name: Deploy sssd config
|
|
|
|
|
template: src=sssd.conf.j2 dest=/etc/sssd/sssd.conf owner=root group=root mode=0600
|
|
|
|
|
notify: restart sssd
|
|
|
|
|
|
|
|
|
|
- name: Ensure nsswitch is using sssd
|
|
|
|
|
lineinfile:
|
|
|
|
|
dest: /etc/nsswitch.conf
|
|
|
|
|
regexp: "{{ item.regexp }}"
|
|
|
|
|
line: "{{ item.line }}"
|
|
|
|
|
with_items:
|
|
|
|
|
- regexp: '^passwd:.*'
|
|
|
|
|
line: 'passwd: files sss'
|
|
|
|
|
- regexp: '^shadow:.*'
|
|
|
|
|
line: 'shadow: files sss'
|
|
|
|
|
- regexp: '^group:.*'
|
|
|
|
|
line: 'group: files sss'
|
|
|
|
|
|
|
|
|
|
- name: Start and enable sssd service
|
|
|
|
|
service: name=sssd state=started enabled=True
|
|
|
|
|
|
|
|
|
|
- name: Start oddjobd
|
|
|
|
|
service: name=oddjobd state=started enabled=True
|
|
|
|
|
when: ansible_distribution != 'Debian' or ansible_distribution_major_version is version('9', '>=')
|
|
|
|
|
|
|
|
|
|
- include_tasks: pam_{{ ansible_os_family }}.yml
|
