From 3f864685cbeb2b170569ee8da4278ac2ba871750 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Mon, 7 Sep 2015 21:42:38 +0200 Subject: [PATCH] Aesthetic changes to pam_base. Skipping update-ca-certificates if ca.crt is not downloaded anew. --- roles/domain/tasks/pam_base.yml | 2 +- roles/domain/tasks/sslproxy.yml | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/roles/domain/tasks/pam_base.yml b/roles/domain/tasks/pam_base.yml index b946097..4bb1048 100644 --- a/roles/domain/tasks/pam_base.yml +++ b/roles/domain/tasks/pam_base.yml @@ -1,7 +1,7 @@ --- # Configurazione di base di PAM per dominio -- name: 'installazione libpam-winbind' +- name: Installazione libpam-winbind apt: name=libpam-winbind state=present sudo: yes diff --git a/roles/domain/tasks/sslproxy.yml b/roles/domain/tasks/sslproxy.yml index e206b5c..f207d0c 100644 --- a/roles/domain/tasks/sslproxy.yml +++ b/roles/domain/tasks/sslproxy.yml @@ -14,9 +14,11 @@ url: http://{{ serverfqdn }}/proxy.crt dest: /usr/local/share/ca-certificates/{{ domainfull }}/ca.crt sudo: yes + register: proxycrt_dwnl - name: Aggiungo il certificato a quelli utilizzati dal sistema shell: update-ca-certificates + when: proxycrt_dwnl|changed sudo: yes - name: Scarico il database dei certificati di FF con certificato server aggiornato.