mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-06 13:23:14 +00:00
Merge pull request #210 from t-woerner/tests_unite_admin_passwords
Unite admin passwords
This commit is contained in:
@@ -90,23 +90,23 @@ author:
|
||||
EXAMPLES = """
|
||||
# Create group ops with gid 1234
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: ops
|
||||
gidnumber: 1234
|
||||
|
||||
# Create group sysops
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sysops
|
||||
|
||||
# Create group appops
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: appops
|
||||
|
||||
# Add user member pinky to group sysops
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sysops
|
||||
action: member
|
||||
user:
|
||||
@@ -114,7 +114,7 @@ EXAMPLES = """
|
||||
|
||||
# Add user member brain to group sysops
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sysops
|
||||
action: member
|
||||
user:
|
||||
@@ -122,7 +122,7 @@ EXAMPLES = """
|
||||
|
||||
# Add group members sysops and appops to group sysops
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: ops
|
||||
group:
|
||||
- sysops
|
||||
@@ -130,7 +130,7 @@ EXAMPLES = """
|
||||
|
||||
# Remove goups sysops, appops and ops
|
||||
- ipagroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sysops,appops,ops
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -103,52 +103,52 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure HBAC Rule allhosts is present
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: allhosts
|
||||
usercategory: all
|
||||
|
||||
# Ensure host server is present in HBAC Rule allhosts
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: allhosts
|
||||
host: server
|
||||
action: member
|
||||
|
||||
# Ensure HBAC Rule sshd-pinky is present
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sshd-pinky
|
||||
hostcategory: all
|
||||
|
||||
# Ensure user pinky is present in HBAC Rule sshd-pinky
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sshd-pinky
|
||||
user: pinky
|
||||
action: member
|
||||
|
||||
# Ensure HBAC service sshd is present in HBAC Rule sshd-pinky
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sshd-pinky
|
||||
hbacsvc: sshd
|
||||
action: member
|
||||
|
||||
# Ensure HBAC Rule sshd-pinky is disabled
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sshd-pinky
|
||||
state: disabled
|
||||
|
||||
# Ensure HBAC Rule sshd-pinky is enabled
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sshd-pinky
|
||||
state: enabled
|
||||
|
||||
# Ensure HBAC Rule sshd-pinky is absent
|
||||
- ipahbacrule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: sshd-pinky
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -56,13 +56,13 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure HBAC Service for http is present
|
||||
- ipahbacsvc:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: http
|
||||
description: Web service
|
||||
|
||||
# Ensure HBAC Service for tftp is absent
|
||||
- ipahbacsvc:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: tftp
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -69,14 +69,14 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure hbacsvcgroup login is present
|
||||
- ipahbacsvcgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: login
|
||||
hbacsvc:
|
||||
- sshd
|
||||
|
||||
# Ensure hbacsvc sshd is present in existing login hbacsvcgroup
|
||||
- ipahbacsvcgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: databases
|
||||
hbacsvc:
|
||||
- sshd
|
||||
@@ -84,7 +84,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure hbacsvc sshd is abdsent in existing login hbacsvcgroup
|
||||
- ipahbacsvcgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: databases
|
||||
hbacsvc:
|
||||
- sshd
|
||||
@@ -93,7 +93,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure hbacsvcgroup login is absent
|
||||
- ipahbacsvcgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: login
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -343,7 +343,7 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure host is present
|
||||
- ipahost:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: host01.example.com
|
||||
description: Example host
|
||||
ip_address: 192.168.0.123
|
||||
@@ -358,14 +358,14 @@ EXAMPLES = """
|
||||
|
||||
# Ensure host is present without DNS
|
||||
- ipahost:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: host02.example.com
|
||||
description: Example host
|
||||
force: yes
|
||||
|
||||
# Initiate generation of a random password for the host
|
||||
- ipahost:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: host01.example.com
|
||||
description: Example host
|
||||
ip_address: 192.168.0.123
|
||||
@@ -373,7 +373,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure host is disabled
|
||||
- ipahost:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: host01.example.com
|
||||
update_dns: yes
|
||||
state: disabled
|
||||
|
||||
@@ -73,7 +73,7 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure host-group databases is present
|
||||
- ipahostgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: databases
|
||||
host:
|
||||
- db.example.com
|
||||
@@ -83,7 +83,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure hosts and hostgroups are present in existing databases hostgroup
|
||||
- ipahostgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: databases
|
||||
host:
|
||||
- db.example.com
|
||||
@@ -94,7 +94,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure hosts and hostgroups are absent in databases hostgroup
|
||||
- ipahostgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: databases
|
||||
host:
|
||||
- db.example.com
|
||||
@@ -106,7 +106,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure host-group databases is absent
|
||||
- ipahostgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: databases
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -98,7 +98,7 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure pwpolicy is set for ops
|
||||
- ipapwpolicy:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: ops
|
||||
minlife: 7
|
||||
maxlife: 49
|
||||
|
||||
@@ -57,13 +57,13 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure sudocmd is present
|
||||
- ipacommand:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: su
|
||||
state: present
|
||||
|
||||
# Ensure sudocmd is absent
|
||||
- ipacommand:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: su
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -73,13 +73,13 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure sudocmd-group 'network' is present
|
||||
- ipasudocmdgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: network
|
||||
state: present
|
||||
|
||||
# Ensure sudocmdgroup and sudocmd are present in 'network' sudocmdgroup
|
||||
- ipasudocmdgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: network
|
||||
sudocmd:
|
||||
- /usr/sbin/ifconfig
|
||||
@@ -88,7 +88,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure sudocmdgroup and sudocmd are absent in 'network' sudocmdgroup
|
||||
- ipasudocmdgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: network
|
||||
sudocmd:
|
||||
- /usr/sbin/ifconfig
|
||||
@@ -98,7 +98,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure sudocmd-group 'network' is absent
|
||||
- ipasudocmdgroup:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: network
|
||||
action: member
|
||||
state: absent
|
||||
|
||||
@@ -131,7 +131,7 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure Sudo Rule tesrule1 is present
|
||||
- ipasudorule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: testrule1
|
||||
|
||||
# Ensure sudocmd is present in Sudo Rule
|
||||
@@ -146,35 +146,35 @@ EXAMPLES = """
|
||||
|
||||
# Ensure host server is present in Sudo Rule
|
||||
- ipasudorule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: testrule1
|
||||
host: server
|
||||
action: member
|
||||
|
||||
# Ensure hostgroup cluster is present in Sudo Rule
|
||||
- ipasudorule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: testrule1
|
||||
hostgroup: cluster
|
||||
action: member
|
||||
|
||||
# Ensure sudo rule for usercategory "all"
|
||||
- ipasudorule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: allusers
|
||||
usercategory: all
|
||||
action: enabled
|
||||
|
||||
# Ensure sudo rule for hostcategory "all"
|
||||
- ipasudorule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: allhosts
|
||||
hostcategory: all
|
||||
action: enabled
|
||||
|
||||
# Ensure Sudo Rule tesrule1 is absent
|
||||
- ipasudorule:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: testrule1
|
||||
state: absent
|
||||
"""
|
||||
|
||||
@@ -392,7 +392,7 @@ author:
|
||||
EXAMPLES = """
|
||||
# Create user pinky
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: pinky
|
||||
first: pinky
|
||||
last: Acme
|
||||
@@ -406,39 +406,39 @@ EXAMPLES = """
|
||||
|
||||
# Create user brain
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: brain
|
||||
first: brain
|
||||
last: Acme
|
||||
|
||||
# Delete user pinky, but preserved
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: pinky
|
||||
preserve: yes
|
||||
state: absent
|
||||
|
||||
# Undelete user pinky
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: pinky
|
||||
state: undeleted
|
||||
|
||||
# Disable user pinky
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: pinky,brain
|
||||
state: disabled
|
||||
|
||||
# Enable user pinky and brain
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: pinky,brain
|
||||
state: enabled
|
||||
|
||||
# Remove user pinky and brain
|
||||
- ipauser:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: pinky,brain
|
||||
state: disabled
|
||||
"""
|
||||
|
||||
@@ -111,7 +111,7 @@ author:
|
||||
EXAMPLES = """
|
||||
# Ensure vault symvault is present
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
vault_password: MyVaultPassword123
|
||||
@@ -120,7 +120,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure group ipausers is a vault member.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
groups: ipausers
|
||||
@@ -128,7 +128,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure group ipausers is not a vault member.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
groups: ipausers
|
||||
@@ -137,7 +137,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure vault users are present.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
users:
|
||||
@@ -147,7 +147,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure vault users are absent.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
users:
|
||||
@@ -158,7 +158,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure user owns vault.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
action: member
|
||||
@@ -166,7 +166,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure user does not own vault.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
owners: user01
|
||||
@@ -175,7 +175,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure data is archived to a symmetric vault
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
username: admin
|
||||
vault_password: MyVaultPassword123
|
||||
@@ -186,14 +186,14 @@ EXAMPLES = """
|
||||
|
||||
# Ensure vault symvault is absent
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: symvault
|
||||
user: admin
|
||||
state: absent
|
||||
|
||||
# Ensure asymmetric vault is present.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: asymvault
|
||||
username: user01
|
||||
description: An asymmetric vault
|
||||
@@ -208,7 +208,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure data is archived in an asymmetric vault
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: asymvault
|
||||
username: admin
|
||||
vault_data: >
|
||||
@@ -218,7 +218,7 @@ EXAMPLES = """
|
||||
|
||||
# Ensure asymmetric vault is absent.
|
||||
- ipavault:
|
||||
ipaadmin_password: MyPassword123
|
||||
ipaadmin_password: SomeADMINpassword
|
||||
name: asymvault
|
||||
username: user01
|
||||
vault_type: asymmetric
|
||||
|
||||
Reference in New Issue
Block a user