a lot of fixes for better OS support
This commit is contained in:
parent
24bd7132d2
commit
b456871116
@ -1,8 +1,8 @@
|
|||||||
---
|
---
|
||||||
|
|
||||||
- name: Installing client packages
|
- name: Installing nfs client packages
|
||||||
apt:
|
apt:
|
||||||
name: [ 'nfs-common', 'libnss-ldap' ]
|
name: [ 'nfs-common' ]
|
||||||
state: latest
|
state: latest
|
||||||
|
|
||||||
- name: Create directory for user homes
|
- name: Create directory for user homes
|
||||||
@ -14,19 +14,148 @@
|
|||||||
src: "{{ esmith.SystemName }}.{{ esmith.DomainName }}:/var/lib/nethserver/home"
|
src: "{{ esmith.SystemName }}.{{ esmith.DomainName }}:/var/lib/nethserver/home"
|
||||||
fstype: nfs4
|
fstype: nfs4
|
||||||
opts: rw,async,_netdev
|
opts: rw,async,_netdev
|
||||||
passno: 1
|
passno: "1"
|
||||||
dump: 0
|
dump: "0"
|
||||||
state: mounted
|
state: mounted
|
||||||
|
|
||||||
# forse questo non serve
|
########################## nslcd
|
||||||
- name: Tweak idmap.conf
|
- name: Set bind DN
|
||||||
ini_file:
|
debconf:
|
||||||
path: /etc/idmapd.conf
|
name: nslcd
|
||||||
section: Translation
|
question: nslcd/ldap-binddn
|
||||||
option: Method
|
value: cn=ldapservice,dc=directory,dc=nh
|
||||||
value: nsswitch
|
vtype: string
|
||||||
mode: 0644
|
|
||||||
|
|
||||||
|
- name: Set base DN
|
||||||
|
debconf:
|
||||||
|
name: nslcd
|
||||||
|
question: nslcd/ldap-base
|
||||||
|
value: dc=directory,dc=nh
|
||||||
|
vtype: string
|
||||||
|
|
||||||
|
- name: Set LDAP server
|
||||||
|
debconf:
|
||||||
|
name: nslcd
|
||||||
|
question: nslcd/ldap-uris
|
||||||
|
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
|
||||||
|
vtype: string
|
||||||
|
|
||||||
|
- name: Set bind password
|
||||||
|
debconf:
|
||||||
|
name: nslcd
|
||||||
|
question: nslcd/ldap-bindpw
|
||||||
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
||||||
|
vtype: password
|
||||||
|
|
||||||
|
########################## ldap-auth
|
||||||
|
- name: Set bind DN
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/binddn
|
||||||
|
value: cn=ldapservice,dc=directory,dc=nh
|
||||||
|
vtype: string
|
||||||
|
|
||||||
|
- name: Set root bind DN
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/rootbinddn
|
||||||
|
value: cn=ldapservice,dc=directory,dc=nh
|
||||||
|
vtype: string
|
||||||
|
|
||||||
|
- name: Set base DN
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/ldapns/base-dn
|
||||||
|
value: dc=directory,dc=nh
|
||||||
|
vtype: string
|
||||||
|
|
||||||
|
- name: Set login required
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/dblogin
|
||||||
|
value: "true"
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
|
- name: Set root login required
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/dbrootlogin
|
||||||
|
value: "true"
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
|
- name: Set ldap override
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/override
|
||||||
|
value: "true"
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
|
- name: Set move-to-debconf
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/move-to-debconf
|
||||||
|
value: "true"
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
|
- name: Set pam password
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/pam_password
|
||||||
|
value: exop
|
||||||
|
vtype: select
|
||||||
|
|
||||||
|
- name: Set LDAP server
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/ldapns/ldap-server
|
||||||
|
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
|
||||||
|
vtype: string
|
||||||
|
|
||||||
|
- name: Set LDAP server version
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/ldapns/ldap_version
|
||||||
|
value: "3"
|
||||||
|
vtype: select
|
||||||
|
|
||||||
|
- name: Set bind password
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/bindpw
|
||||||
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
||||||
|
vtype: password
|
||||||
|
|
||||||
|
- name: Set root bind password
|
||||||
|
debconf:
|
||||||
|
name: ldap-auth-config
|
||||||
|
question: ldap-auth-config/rootbindpw
|
||||||
|
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
|
||||||
|
vtype: password
|
||||||
|
|
||||||
|
- name: Configure libnss for ldap
|
||||||
|
debconf:
|
||||||
|
name: libnss-ldapd
|
||||||
|
question: libnss-ldapd/nsswitch
|
||||||
|
value: "passwd, group, shadow"
|
||||||
|
vtype: multiselect
|
||||||
|
- name: Configure libnss for not removnig ldap configuration
|
||||||
|
debconf:
|
||||||
|
name: libnss-ldapd
|
||||||
|
question: libnss-ldapd/clean_nsswitch
|
||||||
|
value: "false"
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
|
########################## packages install
|
||||||
|
- name: Installing client packages
|
||||||
|
apt:
|
||||||
|
name: [ 'libnss-ldapd', 'ldap-auth-config' ]
|
||||||
|
state: latest
|
||||||
|
|
||||||
|
|
||||||
|
# nss_initgroups_ignoreusers avahi,avahi-autoipd,backup,bin,colord,daemon,dnsmasq,games,gnats,hplip,irc,kernoops,libuuid,lightdm,list,lp,mail,man,messagebus,news,proxy,pulse,root,rtkit,saned,speech-dispatcher,sshd,statd,sync,sys,syslog,usbmux,uucp,whoopsie,www-data
|
||||||
|
|
||||||
|
|
||||||
|
########################## nsswitch
|
||||||
- name: nsswitch settings for passwd
|
- name: nsswitch settings for passwd
|
||||||
lineinfile:
|
lineinfile:
|
||||||
path: /etc/nsswitch.conf
|
path: /etc/nsswitch.conf
|
||||||
@ -48,15 +177,16 @@
|
|||||||
regexp: '^shadow\:'
|
regexp: '^shadow\:'
|
||||||
line: 'shadow: files ldap'
|
line: 'shadow: files ldap'
|
||||||
|
|
||||||
# TODO: think about security... we should move the ldap admin password somewhere else
|
########################## idmap.conf
|
||||||
- name: ldap configuration
|
- name: Tweak idmap.conf
|
||||||
template:
|
ini_file:
|
||||||
src: 'ldap.conf'
|
path: /etc/idmapd.conf
|
||||||
dest: '/etc/ldap.conf'
|
section: Translation
|
||||||
owner: 'root'
|
option: Method
|
||||||
group: 'root'
|
value: nsswitch
|
||||||
mode: 0644
|
mode: 0644
|
||||||
|
|
||||||
|
########################## DM
|
||||||
- name: Check if lightdm is installed
|
- name: Check if lightdm is installed
|
||||||
shell: dpkg-query -W -f='${Status}' lightdm | grep 'install ok installed'
|
shell: dpkg-query -W -f='${Status}' lightdm | grep 'install ok installed'
|
||||||
register: lightdm_installed
|
register: lightdm_installed
|
||||||
|
Loading…
x
Reference in New Issue
Block a user