Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Support getting a host keytab from IPA

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2020-09-01 22:42:56 +02:00
parent 2af8ad94c9
commit 392e547601
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 18 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

26
roles/keytab/service/tasks/main.yml
View file

@ -40,11 +40,16 @@
- name: Grant host access to keytab - name: Grant host access to keytab
delegate_to: "{{ ipa_server }}" delegate_to: "{{ ipa_server }}"
command: ipa service-allow-retrieve-keytab {{service}}/{{host}} --hosts={{inventory_hostname}} command:
register: service_perm_add_result argv:
- ipa
- "{{ (service == 'host')|ternary('host', 'service') }}-allow-retrieve-keytab"
- "{{service}}/{{host}}"
- --hosts={{inventory_hostname}}
register: perm_add_result
check_mode: no check_mode: no
changed_when: "'members added 1' in service_perm_add_result.stdout" changed_when: "'members added 1' in perm_add_result.stdout"
failed_when: "not ('members added' in service_perm_add_result.stdout)" failed_when: "not ('members added' in perm_add_result.stdout)"
tags: tags:
- keytab - keytab
- config - config
@ -53,11 +58,16 @@
- name: Grant admin access to keytab - name: Grant admin access to keytab
delegate_to: "{{ ipa_server }}" delegate_to: "{{ ipa_server }}"
command: ipa service-allow-retrieve-keytab {{service}}/{{host}} --users=admin command:
register: service_perm_add_result argv:
- ipa
- "{{ (service == 'host')|ternary('host', 'service') }}-allow-retrieve-keytab"
- "{{service}}/{{host}}"
- --users=admin
register: perm_add_result
check_mode: no check_mode: no
changed_when: "'members added 1' in service_perm_add_result.stdout" changed_when: "'members added 1' in perm_add_result.stdout"
failed_when: "not ('members added' in service_perm_add_result.stdout)" failed_when: "not ('members added' in perm_add_result.stdout)"
tags: tags:
- keytab - keytab
- config - config