Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

IPA: Don't allow all users to log into all hosts

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2020-10-14 14:44:45 +02:00
parent ca8a00dc54
commit e97aa82fc0
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/ipa/server/tasks/main.yml
View file

@ -332,6 +332,16 @@
changed_when: "'already exists' not in output.stdout" changed_when: "'already exists' not in output.stdout"
failed_when: "'already exists' not in output.stdout and output.rc != 0" failed_when: "'already exists' not in output.stdout and output.rc != 0"
# HBAC
- name: Don't allow all users to log into all hosts
command: ipa hbacrule-disable allow_all
tags:
- ipa/server
- config
when: ipa_initial
register: output
# Noggin user setup # Noggin user setup
- name: Register the proper noggin admin password - name: Register the proper noggin admin password