a lot of fixes for better OS support

This commit is contained in:
Paolo Asperti 2020-03-08 10:56:22 +01:00
parent 24bd7132d2
commit b456871116
Signed by: paspo
GPG Key ID: 06D46905D19D5182
1 changed files with 149 additions and 19 deletions

View File

@ -1,8 +1,8 @@
--- ---
- name: Installing client packages - name: Installing nfs client packages
apt: apt:
name: [ 'nfs-common', 'libnss-ldap' ] name: [ 'nfs-common' ]
state: latest state: latest
- name: Create directory for user homes - name: Create directory for user homes
@ -14,19 +14,148 @@
src: "{{ esmith.SystemName }}.{{ esmith.DomainName }}:/var/lib/nethserver/home" src: "{{ esmith.SystemName }}.{{ esmith.DomainName }}:/var/lib/nethserver/home"
fstype: nfs4 fstype: nfs4
opts: rw,async,_netdev opts: rw,async,_netdev
passno: 1 passno: "1"
dump: 0 dump: "0"
state: mounted state: mounted
# forse questo non serve ########################## nslcd
- name: Tweak idmap.conf - name: Set bind DN
ini_file: debconf:
path: /etc/idmapd.conf name: nslcd
section: Translation question: nslcd/ldap-binddn
option: Method value: cn=ldapservice,dc=directory,dc=nh
value: nsswitch vtype: string
mode: 0644
- name: Set base DN
debconf:
name: nslcd
question: nslcd/ldap-base
value: dc=directory,dc=nh
vtype: string
- name: Set LDAP server
debconf:
name: nslcd
question: nslcd/ldap-uris
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
vtype: string
- name: Set bind password
debconf:
name: nslcd
question: nslcd/ldap-bindpw
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
vtype: password
########################## ldap-auth
- name: Set bind DN
debconf:
name: ldap-auth-config
question: ldap-auth-config/binddn
value: cn=ldapservice,dc=directory,dc=nh
vtype: string
- name: Set root bind DN
debconf:
name: ldap-auth-config
question: ldap-auth-config/rootbinddn
value: cn=ldapservice,dc=directory,dc=nh
vtype: string
- name: Set base DN
debconf:
name: ldap-auth-config
question: ldap-auth-config/ldapns/base-dn
value: dc=directory,dc=nh
vtype: string
- name: Set login required
debconf:
name: ldap-auth-config
question: ldap-auth-config/dblogin
value: "true"
vtype: boolean
- name: Set root login required
debconf:
name: ldap-auth-config
question: ldap-auth-config/dbrootlogin
value: "true"
vtype: boolean
- name: Set ldap override
debconf:
name: ldap-auth-config
question: ldap-auth-config/override
value: "true"
vtype: boolean
- name: Set move-to-debconf
debconf:
name: ldap-auth-config
question: ldap-auth-config/move-to-debconf
value: "true"
vtype: boolean
- name: Set pam password
debconf:
name: ldap-auth-config
question: ldap-auth-config/pam_password
value: exop
vtype: select
- name: Set LDAP server
debconf:
name: ldap-auth-config
question: ldap-auth-config/ldapns/ldap-server
value: ldap://{{ esmith.SystemName }}.{{ esmith.DomainName }}:389/
vtype: string
- name: Set LDAP server version
debconf:
name: ldap-auth-config
question: ldap-auth-config/ldapns/ldap_version
value: "3"
vtype: select
- name: Set bind password
debconf:
name: ldap-auth-config
question: ldap-auth-config/bindpw
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
vtype: password
- name: Set root bind password
debconf:
name: ldap-auth-config
question: ldap-auth-config/rootbindpw
value: "{{ lookup('file', '/var/lib/nethserver/secrets/ldapservice') }}"
vtype: password
- name: Configure libnss for ldap
debconf:
name: libnss-ldapd
question: libnss-ldapd/nsswitch
value: "passwd, group, shadow"
vtype: multiselect
- name: Configure libnss for not removnig ldap configuration
debconf:
name: libnss-ldapd
question: libnss-ldapd/clean_nsswitch
value: "false"
vtype: boolean
########################## packages install
- name: Installing client packages
apt:
name: [ 'libnss-ldapd', 'ldap-auth-config' ]
state: latest
# nss_initgroups_ignoreusers avahi,avahi-autoipd,backup,bin,colord,daemon,dnsmasq,games,gnats,hplip,irc,kernoops,libuuid,lightdm,list,lp,mail,man,messagebus,news,proxy,pulse,root,rtkit,saned,speech-dispatcher,sshd,statd,sync,sys,syslog,usbmux,uucp,whoopsie,www-data
########################## nsswitch
- name: nsswitch settings for passwd - name: nsswitch settings for passwd
lineinfile: lineinfile:
path: /etc/nsswitch.conf path: /etc/nsswitch.conf
@ -48,15 +177,16 @@
regexp: '^shadow\:' regexp: '^shadow\:'
line: 'shadow: files ldap' line: 'shadow: files ldap'
# TODO: think about security... we should move the ldap admin password somewhere else ########################## idmap.conf
- name: ldap configuration - name: Tweak idmap.conf
template: ini_file:
src: 'ldap.conf' path: /etc/idmapd.conf
dest: '/etc/ldap.conf' section: Translation
owner: 'root' option: Method
group: 'root' value: nsswitch
mode: 0644 mode: 0644
########################## DM
- name: Check if lightdm is installed - name: Check if lightdm is installed
shell: dpkg-query -W -f='${Status}' lightdm | grep 'install ok installed' shell: dpkg-query -W -f='${Status}' lightdm | grep 'install ok installed'
register: lightdm_installed register: lightdm_installed