Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

FAS config fixes

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-09-20 22:02:34 +00:00
parent e4bd3103b1
commit b261403d84
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/fas_server/tasks/main.yml
View file

@ -11,6 +11,7 @@
- httpd
- mod_wsgi
- python-bunch
- python-requests-kerberos
tags:
- packages
- fas

4
roles/fas_server/templates/fas.cfg.j2
View file

@ -67,6 +67,8 @@ ipa_sync_principal = 'fas_sync@STG.FEDORAPROJECT.ORG'
ipa_sync_keytab = '/etc/fas_sync_keytab'
ipa_sync_certfile = '/etc/fas_sync_cert.pem'
{% else %}
ipa_sync_enabled = False
{% endif %}
###
### Administrative settings
@ -79,11 +81,9 @@ username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,
username_blacklist = "abuse,accounts,adm,admin,amanda,apache,askfedora,asterisk,bin,board,bodhi,bodhi2,canna,census,chair,chairman,containerbuild,cvsdirsec,cvsdocs,cvseclipse,cvsextras,cvsfont,daemon,dbus,decode,desktop,dgilmore,directors,dovecot,dumper,fama,famsco,fas,fax,fedora,fedorarewards,fesco,freemedia,ftbfs,ftp,ftpadm,ftpadmin,ftpsync,games,gdm,gnomebackup,gopher,gregdek,halt,hostmaster,hotness,ident,info,ingres,jaboutboul,jan,keys,kojiadmin,ldap,legal,logo,lp,mail,mailnull,manager,marketing,masher,masta,mirrormanager,mysql,nagios,named,netdump,news,newsadm,newsadmin,nfsnobody,nobody,noc,notifications,nrpe,nscd,ntp,nut,openvideo,operator,packager,patrick,pcap,pkgdb,pkgsigner,postfix,postgres,postmaster,press,privoxy,pvm,quagga,radiusd,radvd,relnotes,relrod,rel-eng,root,rpc,rpcuser,rpm,rsc,s3-mirror,sales,scholarship,secalert,secondary-signer,security,server-wg,shutdown,smmsp,spevack,squid,sshd,support,sync,system,tickets,toor,updates,usenet,uucp,vcsa,vendors,vendor-support,voting,webalizer,webmaster,wikiadmin,wnn,www,xfs,zabbix"
{% endif %}
email_domain_blacklist = "{{ fas_blocked_emails }}"
{% if env == "staging" %}
# Valid SSH Key
valid_ssh_key = "rsa,ssh-rsa,ecdsa,ecdsa-sha2"
{% endif %}
# admingroup has powers to change anything in the fas UI
admingroup = 'accounts'