internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-07-31 11:54:47 +00:00
Code Issues Projects Releases Wiki Activity

roles/krb5: New krb5_no_default_domain setting

Browse Source
This commit is contained in:
Thomas Woerner
2017-08-30 14:31:05 +02:00
parent e65ba14e52
commit 5f17e9a778
3 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/krb5/defaults/main.yml
View File

@@ -8,6 +8,7 @@ krb5_realm:
krb5_servers: krb5_servers:
krb5_dns_lookup_realm: "false" krb5_dns_lookup_realm: "false"
krb5_dns_lookup_kdc: "false" krb5_dns_lookup_kdc: "false"
krb5_no_default_domain: "false"
krb5_default_ccache_name: KEYRING:persistent:%{uid} krb5_default_ccache_name: KEYRING:persistent:%{uid}
krb5_pkinit_anchors: FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem krb5_pkinit_anchors: FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem

5
roles/krb5/tasks/main.yml
View File

@@ -13,8 +13,9 @@
- name: Template krb5.conf - name: Template krb5.conf
template: template:
src: krb5.conf.j2 src: krb5.conf.j2
dest: /etc/krb5.conf dest: "{{ krb5_conf }}"
backup: yes backup: no
owner: root owner: root
group: root group: root
mode: 0644 mode: 0644
force: yes

2
roles/krb5/templates/krb5.conf.j2
View File

@@ -20,7 +20,9 @@ includedir {{ krb5_include_d }}
admin_server = {{ server }}:749 admin_server = {{ server }}:749
kpasswd_server = {{ server }}:464 kpasswd_server = {{ server }}:464
{% endfor %} {% endfor %}
{% if krb5_no_default_domain | bool %}
default_domain = {{ krb5_realm | lower }} default_domain = {{ krb5_realm | lower }}
{% endif %}
pkinit_anchors = {{ krb5_pkinit_anchors }} pkinit_anchors = {{ krb5_pkinit_anchors }}
pkinit_pool = {{ krb5_pkinit_pool }} pkinit_pool = {{ krb5_pkinit_pool }}
} }