plugins: Unite admin password

Use SomeADMINpassword as the admin password also in the examples in the
management modules.
This commit is contained in:
Thomas Woerner
2020-02-26 12:41:05 +01:00
parent d370ed2737
commit 472050de7b
12 changed files with 61 additions and 61 deletions

View File

@@ -90,23 +90,23 @@ author:
EXAMPLES = """ EXAMPLES = """
# Create group ops with gid 1234 # Create group ops with gid 1234
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: ops name: ops
gidnumber: 1234 gidnumber: 1234
# Create group sysops # Create group sysops
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sysops name: sysops
# Create group appops # Create group appops
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: appops name: appops
# Add user member pinky to group sysops # Add user member pinky to group sysops
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sysops name: sysops
action: member action: member
user: user:
@@ -114,7 +114,7 @@ EXAMPLES = """
# Add user member brain to group sysops # Add user member brain to group sysops
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sysops name: sysops
action: member action: member
user: user:
@@ -122,7 +122,7 @@ EXAMPLES = """
# Add group members sysops and appops to group sysops # Add group members sysops and appops to group sysops
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: ops name: ops
group: group:
- sysops - sysops
@@ -130,7 +130,7 @@ EXAMPLES = """
# Remove goups sysops, appops and ops # Remove goups sysops, appops and ops
- ipagroup: - ipagroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sysops,appops,ops name: sysops,appops,ops
state: absent state: absent
""" """

View File

@@ -103,52 +103,52 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure HBAC Rule allhosts is present # Ensure HBAC Rule allhosts is present
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: allhosts name: allhosts
usercategory: all usercategory: all
# Ensure host server is present in HBAC Rule allhosts # Ensure host server is present in HBAC Rule allhosts
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: allhosts name: allhosts
host: server host: server
action: member action: member
# Ensure HBAC Rule sshd-pinky is present # Ensure HBAC Rule sshd-pinky is present
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sshd-pinky name: sshd-pinky
hostcategory: all hostcategory: all
# Ensure user pinky is present in HBAC Rule sshd-pinky # Ensure user pinky is present in HBAC Rule sshd-pinky
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sshd-pinky name: sshd-pinky
user: pinky user: pinky
action: member action: member
# Ensure HBAC service sshd is present in HBAC Rule sshd-pinky # Ensure HBAC service sshd is present in HBAC Rule sshd-pinky
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sshd-pinky name: sshd-pinky
hbacsvc: sshd hbacsvc: sshd
action: member action: member
# Ensure HBAC Rule sshd-pinky is disabled # Ensure HBAC Rule sshd-pinky is disabled
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sshd-pinky name: sshd-pinky
state: disabled state: disabled
# Ensure HBAC Rule sshd-pinky is enabled # Ensure HBAC Rule sshd-pinky is enabled
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sshd-pinky name: sshd-pinky
state: enabled state: enabled
# Ensure HBAC Rule sshd-pinky is absent # Ensure HBAC Rule sshd-pinky is absent
- ipahbacrule: - ipahbacrule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: sshd-pinky name: sshd-pinky
state: absent state: absent
""" """

View File

@@ -56,13 +56,13 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure HBAC Service for http is present # Ensure HBAC Service for http is present
- ipahbacsvc: - ipahbacsvc:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: http name: http
description: Web service description: Web service
# Ensure HBAC Service for tftp is absent # Ensure HBAC Service for tftp is absent
- ipahbacsvc: - ipahbacsvc:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: tftp name: tftp
state: absent state: absent
""" """

View File

@@ -69,14 +69,14 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure hbacsvcgroup login is present # Ensure hbacsvcgroup login is present
- ipahbacsvcgroup: - ipahbacsvcgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: login name: login
hbacsvc: hbacsvc:
- sshd - sshd
# Ensure hbacsvc sshd is present in existing login hbacsvcgroup # Ensure hbacsvc sshd is present in existing login hbacsvcgroup
- ipahbacsvcgroup: - ipahbacsvcgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: databases name: databases
hbacsvc: hbacsvc:
- sshd - sshd
@@ -84,7 +84,7 @@ EXAMPLES = """
# Ensure hbacsvc sshd is abdsent in existing login hbacsvcgroup # Ensure hbacsvc sshd is abdsent in existing login hbacsvcgroup
- ipahbacsvcgroup: - ipahbacsvcgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: databases name: databases
hbacsvc: hbacsvc:
- sshd - sshd
@@ -93,7 +93,7 @@ EXAMPLES = """
# Ensure hbacsvcgroup login is absent # Ensure hbacsvcgroup login is absent
- ipahbacsvcgroup: - ipahbacsvcgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: login name: login
state: absent state: absent
""" """

View File

@@ -343,7 +343,7 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure host is present # Ensure host is present
- ipahost: - ipahost:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: host01.example.com name: host01.example.com
description: Example host description: Example host
ip_address: 192.168.0.123 ip_address: 192.168.0.123
@@ -358,14 +358,14 @@ EXAMPLES = """
# Ensure host is present without DNS # Ensure host is present without DNS
- ipahost: - ipahost:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: host02.example.com name: host02.example.com
description: Example host description: Example host
force: yes force: yes
# Initiate generation of a random password for the host # Initiate generation of a random password for the host
- ipahost: - ipahost:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: host01.example.com name: host01.example.com
description: Example host description: Example host
ip_address: 192.168.0.123 ip_address: 192.168.0.123
@@ -373,7 +373,7 @@ EXAMPLES = """
# Ensure host is disabled # Ensure host is disabled
- ipahost: - ipahost:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: host01.example.com name: host01.example.com
update_dns: yes update_dns: yes
state: disabled state: disabled

View File

@@ -73,7 +73,7 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure host-group databases is present # Ensure host-group databases is present
- ipahostgroup: - ipahostgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: databases name: databases
host: host:
- db.example.com - db.example.com
@@ -83,7 +83,7 @@ EXAMPLES = """
# Ensure hosts and hostgroups are present in existing databases hostgroup # Ensure hosts and hostgroups are present in existing databases hostgroup
- ipahostgroup: - ipahostgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: databases name: databases
host: host:
- db.example.com - db.example.com
@@ -94,7 +94,7 @@ EXAMPLES = """
# Ensure hosts and hostgroups are absent in databases hostgroup # Ensure hosts and hostgroups are absent in databases hostgroup
- ipahostgroup: - ipahostgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: databases name: databases
host: host:
- db.example.com - db.example.com
@@ -106,7 +106,7 @@ EXAMPLES = """
# Ensure host-group databases is absent # Ensure host-group databases is absent
- ipahostgroup: - ipahostgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: databases name: databases
state: absent state: absent
""" """

View File

@@ -98,7 +98,7 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure pwpolicy is set for ops # Ensure pwpolicy is set for ops
- ipapwpolicy: - ipapwpolicy:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: ops name: ops
minlife: 7 minlife: 7
maxlife: 49 maxlife: 49

View File

@@ -57,13 +57,13 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure sudocmd is present # Ensure sudocmd is present
- ipacommand: - ipacommand:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: su name: su
state: present state: present
# Ensure sudocmd is absent # Ensure sudocmd is absent
- ipacommand: - ipacommand:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: su name: su
state: absent state: absent
""" """

View File

@@ -73,13 +73,13 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure sudocmd-group 'network' is present # Ensure sudocmd-group 'network' is present
- ipasudocmdgroup: - ipasudocmdgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: network name: network
state: present state: present
# Ensure sudocmdgroup and sudocmd are present in 'network' sudocmdgroup # Ensure sudocmdgroup and sudocmd are present in 'network' sudocmdgroup
- ipasudocmdgroup: - ipasudocmdgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: network name: network
sudocmd: sudocmd:
- /usr/sbin/ifconfig - /usr/sbin/ifconfig
@@ -88,7 +88,7 @@ EXAMPLES = """
# Ensure sudocmdgroup and sudocmd are absent in 'network' sudocmdgroup # Ensure sudocmdgroup and sudocmd are absent in 'network' sudocmdgroup
- ipasudocmdgroup: - ipasudocmdgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: network name: network
sudocmd: sudocmd:
- /usr/sbin/ifconfig - /usr/sbin/ifconfig
@@ -98,7 +98,7 @@ EXAMPLES = """
# Ensure sudocmd-group 'network' is absent # Ensure sudocmd-group 'network' is absent
- ipasudocmdgroup: - ipasudocmdgroup:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: network name: network
action: member action: member
state: absent state: absent

View File

@@ -131,7 +131,7 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure Sudo Rule tesrule1 is present # Ensure Sudo Rule tesrule1 is present
- ipasudorule: - ipasudorule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: testrule1 name: testrule1
# Ensure sudocmd is present in Sudo Rule # Ensure sudocmd is present in Sudo Rule
@@ -146,35 +146,35 @@ EXAMPLES = """
# Ensure host server is present in Sudo Rule # Ensure host server is present in Sudo Rule
- ipasudorule: - ipasudorule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: testrule1 name: testrule1
host: server host: server
action: member action: member
# Ensure hostgroup cluster is present in Sudo Rule # Ensure hostgroup cluster is present in Sudo Rule
- ipasudorule: - ipasudorule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: testrule1 name: testrule1
hostgroup: cluster hostgroup: cluster
action: member action: member
# Ensure sudo rule for usercategory "all" # Ensure sudo rule for usercategory "all"
- ipasudorule: - ipasudorule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: allusers name: allusers
usercategory: all usercategory: all
action: enabled action: enabled
# Ensure sudo rule for hostcategory "all" # Ensure sudo rule for hostcategory "all"
- ipasudorule: - ipasudorule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: allhosts name: allhosts
hostcategory: all hostcategory: all
action: enabled action: enabled
# Ensure Sudo Rule tesrule1 is absent # Ensure Sudo Rule tesrule1 is absent
- ipasudorule: - ipasudorule:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: testrule1 name: testrule1
state: absent state: absent
""" """

View File

@@ -392,7 +392,7 @@ author:
EXAMPLES = """ EXAMPLES = """
# Create user pinky # Create user pinky
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: pinky name: pinky
first: pinky first: pinky
last: Acme last: Acme
@@ -406,39 +406,39 @@ EXAMPLES = """
# Create user brain # Create user brain
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: brain name: brain
first: brain first: brain
last: Acme last: Acme
# Delete user pinky, but preserved # Delete user pinky, but preserved
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: pinky name: pinky
preserve: yes preserve: yes
state: absent state: absent
# Undelete user pinky # Undelete user pinky
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: pinky name: pinky
state: undeleted state: undeleted
# Disable user pinky # Disable user pinky
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: pinky,brain name: pinky,brain
state: disabled state: disabled
# Enable user pinky and brain # Enable user pinky and brain
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: pinky,brain name: pinky,brain
state: enabled state: enabled
# Remove user pinky and brain # Remove user pinky and brain
- ipauser: - ipauser:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: pinky,brain name: pinky,brain
state: disabled state: disabled
""" """

View File

@@ -111,7 +111,7 @@ author:
EXAMPLES = """ EXAMPLES = """
# Ensure vault symvault is present # Ensure vault symvault is present
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
vault_password: MyVaultPassword123 vault_password: MyVaultPassword123
@@ -120,7 +120,7 @@ EXAMPLES = """
# Ensure group ipausers is a vault member. # Ensure group ipausers is a vault member.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
groups: ipausers groups: ipausers
@@ -128,7 +128,7 @@ EXAMPLES = """
# Ensure group ipausers is not a vault member. # Ensure group ipausers is not a vault member.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
groups: ipausers groups: ipausers
@@ -137,7 +137,7 @@ EXAMPLES = """
# Ensure vault users are present. # Ensure vault users are present.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
users: users:
@@ -147,7 +147,7 @@ EXAMPLES = """
# Ensure vault users are absent. # Ensure vault users are absent.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
users: users:
@@ -158,7 +158,7 @@ EXAMPLES = """
# Ensure user owns vault. # Ensure user owns vault.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
action: member action: member
@@ -166,7 +166,7 @@ EXAMPLES = """
# Ensure user does not own vault. # Ensure user does not own vault.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
owners: user01 owners: user01
@@ -175,7 +175,7 @@ EXAMPLES = """
# Ensure data is archived to a symmetric vault # Ensure data is archived to a symmetric vault
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
username: admin username: admin
vault_password: MyVaultPassword123 vault_password: MyVaultPassword123
@@ -186,14 +186,14 @@ EXAMPLES = """
# Ensure vault symvault is absent # Ensure vault symvault is absent
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: symvault name: symvault
user: admin user: admin
state: absent state: absent
# Ensure asymmetric vault is present. # Ensure asymmetric vault is present.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: asymvault name: asymvault
username: user01 username: user01
description: An asymmetric vault description: An asymmetric vault
@@ -208,7 +208,7 @@ EXAMPLES = """
# Ensure data is archived in an asymmetric vault # Ensure data is archived in an asymmetric vault
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: asymvault name: asymvault
username: admin username: admin
vault_data: > vault_data: >
@@ -218,7 +218,7 @@ EXAMPLES = """
# Ensure asymmetric vault is absent. # Ensure asymmetric vault is absent.
- ipavault: - ipavault:
ipaadmin_password: MyPassword123 ipaadmin_password: SomeADMINpassword
name: asymvault name: asymvault
username: user01 username: user01
vault_type: asymmetric vault_type: asymmetric