diff --git a/roles/domain/tasks/pam_base.yml b/roles/domain/tasks/pam_base.yml index 283f09e..b0e8b00 100644 --- a/roles/domain/tasks/pam_base.yml +++ b/roles/domain/tasks/pam_base.yml @@ -7,48 +7,48 @@ # common-auth -- name: 'common-auth: modifica pam_unix' - replace: - dest: /etc/pam.d/common-auth - regexp: '^.*pam_unix\.so.*nullok_secure$' - replace: 'auth [success=1 default=ignore] pam_unix.so nullok_secure use_first_pass' - backup: yes - sudo: yes - -- name: 'common-auth: aggiunta pam_winbind' - lineinfile: - dest: /etc/pam.d/common-auth - regexp: '^auth.*pam_winbind\.so$' - insertbefore: '^auth.*pam_unix\.so' - line: 'auth [success=2 default=ignore] pam_winbind.so' - state: present - sudo: yes - -- name: 'common-auth: rimuovo config auto pam_winbind' - lineinfile: - dest: /etc/pam.d/common-auth - regexp: 'pam_winbind\.so krb5' - state: absent - sudo: yes - -# common-password - -- name: 'common-password: configurazione pam_unix' - replace: - dest: /etc/pam.d/common-password - regexp: '^(password.*pam_unix\.so.*sha512)$' - replace: '\1 min=4 max=20' - backup: yes - sudo: yes - -# common-session - -- name: 'common-session: configurazione pam_mkhomedir' - lineinfile: - dest: /etc/pam.d/common-session - regexp: '^session.*pam_mkhomedir\.so.*$' - insertafter: '^session\s*required.*pam_permit.so' - line: 'session required pam_mkhomedir.so umask=0022 skel=/etc/skel silent' - state: present - backup: yes - sudo: yes +#- name: 'common-auth: modifica pam_unix' +# replace: +# dest: /etc/pam.d/common-auth +# regexp: '^.*pam_unix\.so.*nullok_secure$' +# replace: 'auth [success=1 default=ignore] pam_unix.so nullok_secure use_first_pass' +# backup: yes +# sudo: yes +# +#- name: 'common-auth: aggiunta pam_winbind' +# lineinfile: +# dest: /etc/pam.d/common-auth +# regexp: '^auth.*pam_winbind\.so$' +# insertbefore: '^auth.*pam_unix\.so' +# line: 'auth [success=2 default=ignore] pam_winbind.so' +# state: present +# sudo: yes +# +#- name: 'common-auth: rimuovo config auto pam_winbind' +# lineinfile: +# dest: /etc/pam.d/common-auth +# regexp: 'pam_winbind\.so krb5' +# state: absent +# sudo: yes +# +## common-password +# +#- name: 'common-password: configurazione pam_unix' +# replace: +# dest: /etc/pam.d/common-password +# regexp: '^(password.*pam_unix\.so.*sha512)$' +# replace: '\1 min=4 max=20' +# backup: yes +# sudo: yes +# +## common-session +# +#- name: 'common-session: configurazione pam_mkhomedir' +# lineinfile: +# dest: /etc/pam.d/common-session +# regexp: '^session.*pam_mkhomedir\.so.*$' +# insertafter: '^session\s*required.*pam_permit.so' +# line: 'session required pam_mkhomedir.so umask=0022 skel=/etc/skel silent' +# state: present +# backup: yes +# sudo: yes diff --git a/roles/domain/tasks/pam_mount.yml b/roles/domain/tasks/pam_mount.yml index 4846260..1b62a92 100644 --- a/roles/domain/tasks/pam_mount.yml +++ b/roles/domain/tasks/pam_mount.yml @@ -9,24 +9,24 @@ template: src=pam_mount.conf.xml dest=/etc/security/pam_mount.conf.xml backup=yes sudo: yes -- name: Creazione directory di default per Condiviso - file: path=/etc/skel/Condiviso state=directory - sudo: yes + #- name: Creazione directory di default per Condiviso + # file: path=/etc/skel/Condiviso state=directory + # sudo: yes -- name: 'common-auth: aggiunta pam_mount' - lineinfile: - dest: /etc/pam.d/common-auth - regexp: '^auth.*pam_mount\.so$' - insertafter: EOF - line: 'auth optional pam_mount.so' - state: present - sudo: yes - -- name: 'common-session: aggiunta pam_mount' - lineinfile: - dest: /etc/pam.d/common-session - regexp: '^session.*pam_mount\.so$' - insertafter: 'session.*pam_winbind\.so' - line: 'session optional pam_mount.so' - state: present - sudo: yes + #- name: 'common-auth: aggiunta pam_mount' + # lineinfile: + # dest: /etc/pam.d/common-auth + # regexp: '^auth.*pam_mount\.so$' + # insertafter: EOF + # line: 'auth optional pam_mount.so' + # state: present + # sudo: yes + # + #- name: 'common-session: aggiunta pam_mount' + # lineinfile: + # dest: /etc/pam.d/common-session + # regexp: '^session.*pam_mount\.so$' + # insertafter: 'session.*pam_winbind\.so' + # line: 'session optional pam_mount.so' + # state: present + # sudo: yes diff --git a/roles/domain/templates/pam_mount.conf.xml b/roles/domain/templates/pam_mount.conf.xml index 15e5e18..7ded0ab 100644 --- a/roles/domain/templates/pam_mount.conf.xml +++ b/roles/domain/templates/pam_mount.conf.xml @@ -1,45 +1,43 @@ + + - + + + - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + - +