Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: split out these groups

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2021-05-22 10:36:20 -07:00
parent 1c6dfc82fd
commit 52a197735b
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/ipa/client/templates/fedora-nss-ignore.conf.j2
View file

@ -1,7 +1,7 @@
# There are a bunch of users we want to prefer the local version instead of the ipa/ldap version.
# But in at least one case, there is a real user ('mock') that we want to exclude on most machines,
# but not on people and ipsilon to allow them access to their people space and be able to login to things.
{% if inventory_hostname in groups['people','ipsilon','ipsilon_stg'] %}
{% if inventory_hostname in groups['people'] or inventory_hostname in groups['ipsilon'] or inventory_hostname in groups['ipsilon_stg'] %}
## This file contains users who are in ipa to stop people from
## creating restricted accounts but we want to make sure the id in
## /etc/passwd and /etc/group are used.