ansible-freeipa/ensure-sudorule-does-not-have-sudooption.yml at 4d94cb09a9fb09dd2576223b9be7f77d515202fb - ansible-freeipa - Gitea: Git with a cup of tea

internet/ansible-freeipa

mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-06-11 19:25:54 +00:00

Files

Rafael Guterres Jeffman dc0a5585fb Add missing attributes to ipasudorule.

This patch adds the following attributes to ipasudorule:

    - order
    - sudooption
    - runasuser
    - runasgroup

It also fixes behavior of sudocmd assigned to the the sudorule, with the
adittion of the attributes:

    - allow_sudocmds
    - deny_sudocmds
    - allow_sudocmdgroups
    - deny_sudocmdgroups

README-sudorule and tests have been updated to comply with the changes.

2020-02-03 09:14:21 -03:00

15 lines

273 B

YAML

Raw Blame History

 ---
 - name: Tests
   hosts: ipaserver
   become: true
   gather_facts: false
   tasks:
   # Ensure sudooption is absent in sudorule
   - ipasudorule:
       ipaadmin_password: MyPassword123
       name: testrule1
       sudooption: "!root"
       action: member
       state: absent