Sebastian Gumprich
bb588bd777
* linting Signed-off-by: Sebastian Gumprich <[email protected]> * more linting Signed-off-by: Sebastian Gumprich <[email protected]> * change line length issues Signed-off-by: Sebastian Gumprich <[email protected]> * replace yes with true in tasks Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * use manual line-wrapping because ansible-lint does not support it correctly. see https://github.com/ansible/ansible-lint/issues/2522 Signed-off-by: Sebastian Gumprich <[email protected]> * add exception for task Signed-off-by: Sebastian Gumprich <[email protected]> * remove trailing whitespace * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back deleted params Signed-off-by: Sebastian Gumprich <[email protected]> * add back tasks Signed-off-by: Sebastian Gumprich <[email protected]>
44 lines
1.0 KiB
YAML
44 lines
1.0 KiB
YAML
---
|
|
- name: Install sssd-clients
|
|
ansible.builtin.yum:
|
|
name: sssd-client
|
|
state: present
|
|
when:
|
|
- os_auth_pam_sssd_enable | bool
|
|
|
|
- name: Configure passwdqc and faillock via central system-auth config
|
|
ansible.builtin.template:
|
|
src: etc/pam.d/rhel_auth.j2
|
|
dest: /etc/pam.d/system-auth-local
|
|
mode: "0640"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Enable our config for system-auth
|
|
ansible.builtin.file:
|
|
src: /etc/pam.d/system-auth-local
|
|
dest: /etc/pam.d/system-auth
|
|
mode: "0640"
|
|
owner: root
|
|
group: root
|
|
state: link
|
|
force: true
|
|
|
|
- name: Configure passwdqc and faillock via central password-auth config
|
|
ansible.builtin.template:
|
|
src: etc/pam.d/rhel_auth.j2
|
|
dest: /etc/pam.d/password-auth-local
|
|
mode: "0640"
|
|
owner: root
|
|
group: root
|
|
|
|
- name: Enable our config for password-auth
|
|
ansible.builtin.file:
|
|
src: /etc/pam.d/password-auth-local
|
|
dest: /etc/pam.d/password-auth
|
|
mode: "0640"
|
|
owner: root
|
|
group: root
|
|
state: link
|
|
force: true
|