diff --git a/roles/domain/tasks/domain_join.yml b/roles/domain/tasks/domain_join.yml index bec441e..5a03a1f 100644 --- a/roles/domain/tasks/domain_join.yml +++ b/roles/domain/tasks/domain_join.yml @@ -1,6 +1,6 @@ --- - name: Permetto ai domadmins di usare sudo - template: src=sudoers.d dest=/etc/sudoers.d/domadmins owner=root group=root mode=0440 + template: src=sudoers.d dest=/etc/sudoers.d/domain owner=root group=root mode=0440 validate="/usr/sbin/visudo -cf %s" sudo: yes - name: verifica join a dominio diff --git a/roles/domain/templates/sudoers.d b/roles/domain/templates/sudoers.d index 22fec5b..269d813 100644 --- a/roles/domain/templates/sudoers.d +++ b/roles/domain/templates/sudoers.d @@ -2,3 +2,5 @@ # Autorizzazione per gli utenti di dominio %domain\ admins ALL=(ALL:ALL) NOPASSWD:ALL %{{ domainshort }}\\domain\ admins ALL=(ALL:ALL) NOPASSWD:ALL +%domain\ operators ALL=(ALL:ALL) ALL +%{{ domainshort }}\\domain\ operators ALL=(ALL:ALL) ALL