Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

IPA: set the expiration date for the admin user

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2020-10-20 11:21:29 +02:00
parent a460c9ae61
commit 33452ed8f9
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/ipa/server/tasks/main.yml
View file

@ -159,6 +159,19 @@
- ipa/server - ipa/server
- config - config
- name: Set the expiration date for the admin user
ipauser:
name: admin
password: "{{ ipa_admin_password }}"
# Password expiration date will be a Friday 13th in 30 years. I'm sure we'll remember that.
passwordexpiration: "2050-05-13 00:00:00"
update_password: on_create
ipaadmin_password: "{{ ipa_admin_password }}"
tags:
- ipa/server
- config
when: ipa_initial
- name: Get admin ticket - name: Get admin ticket
shell: echo "{{ipa_admin_password}}" | kinit admin shell: echo "{{ipa_admin_password}}" | kinit admin
tags: tags:
@ -347,6 +360,9 @@
- name: Register the proper noggin admin password - name: Register the proper noggin admin password
set_fact: set_fact:
noggin_password: "{{ (env == 'production')|ternary(noggin_admin_password, noggin_stg_admin_password) }}" noggin_password: "{{ (env == 'production')|ternary(noggin_admin_password, noggin_stg_admin_password) }}"
tags:
- ipa/server
- config
- name: Create noggin user - name: Create noggin user
ipa_user: ipa_user: