From 33eb384791563e47ce3c7e1a8f7435f755076322 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Tue, 28 Jul 2015 22:40:07 +0200 Subject: [PATCH] Added configuration for domain operators. --- roles/domain/tasks/domain_join.yml | 2 +- roles/domain/templates/sudoers.d | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/roles/domain/tasks/domain_join.yml b/roles/domain/tasks/domain_join.yml index bec441e..5a03a1f 100644 --- a/roles/domain/tasks/domain_join.yml +++ b/roles/domain/tasks/domain_join.yml @@ -1,6 +1,6 @@ --- - name: Permetto ai domadmins di usare sudo - template: src=sudoers.d dest=/etc/sudoers.d/domadmins owner=root group=root mode=0440 + template: src=sudoers.d dest=/etc/sudoers.d/domain owner=root group=root mode=0440 validate="/usr/sbin/visudo -cf %s" sudo: yes - name: verifica join a dominio diff --git a/roles/domain/templates/sudoers.d b/roles/domain/templates/sudoers.d index 22fec5b..269d813 100644 --- a/roles/domain/templates/sudoers.d +++ b/roles/domain/templates/sudoers.d @@ -2,3 +2,5 @@ # Autorizzazione per gli utenti di dominio %domain\ admins ALL=(ALL:ALL) NOPASSWD:ALL %{{ domainshort }}\\domain\ admins ALL=(ALL:ALL) NOPASSWD:ALL +%domain\ operators ALL=(ALL:ALL) ALL +%{{ domainshort }}\\domain\ operators ALL=(ALL:ALL) ALL