ipa/client: enable for smtp_mm in prod

Signed-off-by: Nils Philippsen <nils@redhat.com>

inventory/group_vars/smtp_mm

@@ -9,7 +9,18 @@ num_cpus: 2
 
 tcp_ports: [ 25 ]
 
-fas_client_groups: sysadmin-noc,sysadmin-tools,fi-apprentice,sysadmin-veteran
+primary_auth_source: ipa
+ipa_host_group: smtp_mm
+ipa_host_group_desc: SMTP servers
+ipa_client_shell_access:
+- fi-apprentice
+- sysadmin-noc
+- sysadmin-tools
+- sysadmin-veteran
+ipa_client_sudo_access:
+- sysadmin-noc
+- sysadmin-tools
+- sysadmin-veteran
 
 postfix_transport_filename: transports.smtp-mm
 postfix_group: smtp-mm

playbooks/groups/smtp-mm.yml

@@ -17,8 +17,7 @@
   - rkhunter
   - nagios_client
   - hosts
-  - { role: ipa/client, when: env == "staging" }
+  - ipa/client
-  - { role: fas_client, when: env != "staging" }
   - collectd/base
   - sudo
   - { role: openvpn/client,
@@ -28,7 +27,6 @@
   - import_tasks: "{{ tasks_path }}/yumrepos.yml"
 
   tasks:
-  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
   - import_tasks: "{{ tasks_path }}/motd.yml"
 
   handlers: