mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
57ad57dda3
Since FreeIPA version 4.8.0 ipauser has support for smb-logon-script, smb-profile-path, smb-home-dir, and smb-home-drive drive attributes. On FreeIPA, these attributes are only available when modifying a user, so if the user defined in the playbook does not exist, two calls to IPA API are executed, a 'user_add' followed by a 'user_mod'. (see https://github.com/freeipa/freeipa/blob/master/doc/designs/adtrust/samba-domain-controller.md A new example playbook can be found at: playbooks/user/smb-attributes.yml A new test playbook can be found at: tests/user/test_user_smb_attrs.yml
254 lines
8.4 KiB
YAML
254 lines
8.4 KiB
YAML
---
|
|
- name: Test users
|
|
hosts: "{{ ipa_test_host | default('ipaserver') }}"
|
|
become: no
|
|
gather_facts: no
|
|
|
|
tasks:
|
|
- name: Set FreeIPA environment facts.
|
|
ansible.builtin.include_tasks: ../env_freeipa_facts.yml
|
|
|
|
- name: Only run tests for IPA 4.8.0+
|
|
when: ipa_version is version('4.8.0', '>=')
|
|
block:
|
|
# SETUP
|
|
- name: Remove test users
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
state: absent
|
|
|
|
# TESTS
|
|
- name: Ensure user testuser exists with all smb paramters
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
first: test
|
|
last: user
|
|
smb_profile_path: "/some/profile/path"
|
|
smb_home_dir: "/some/home/dir"
|
|
smb_home_drive: "U{{ ':' }}"
|
|
smb_logon_script: "/some/profile/script.sh"
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Ensure user testuser exists all smb paramters, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
first: test
|
|
last: user
|
|
smb_logon_script: "/some/profile/script.sh"
|
|
smb_profile_path: "/some/profile/path"
|
|
smb_home_dir: "/some/home/dir"
|
|
smb_home_drive: "U{{ ':' }}"
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Check SMB logon script is correct
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_logon_script: "/some/profile/script.sh"
|
|
register: result
|
|
check_mode: true
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Check SMB profile path is correct
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_profile_path: "/some/profile/path"
|
|
register: result
|
|
check_mode: true
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Check SMB Home Directory is correct
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_dir: "/some/home/dir"
|
|
register: result
|
|
check_mode: true
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Check SMB Home Drive is correct
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
first: test
|
|
last: user
|
|
smb_home_drive: "U{{ ':' }}"
|
|
register: result
|
|
check_mode: true
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Set SMB logon script
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_logon_script: "/some/profile/another_script.sh"
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Set SMB logon script, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_logon_script: "/some/profile/another_script.sh"
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Clear SMB logon script
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_logon_script: ""
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Clear SMB logon script, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_logon_script: ""
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Set SMB profile path
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_profile_path: "/some/profile/another_path"
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Set SMB profile path, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_profile_path: "/some/profile/another_path"
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Clear SMB profile path
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_profile_path: ""
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Clear SMB profile, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_profile_path: ""
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Set SMB home directory
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_dir: "/some/other/home"
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Set SMB home directory, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_dir: "/some/other/home"
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Clear SMB home directory
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_dir: ""
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Clear SMB home directory, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_dir: ""
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Set SMB home drive
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_drive: "Z{{ ':' }}"
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Set SMB home drive, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_drive: "Z{{ ':' }}"
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
- name: Set SMB home drive to invalid value
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_drive: "INVALID:"
|
|
register: result
|
|
failed_when: not result.failed or "value of smb_home_drive must be one of" not in result.msg
|
|
|
|
- name: Clear SMB home drive
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_drive: ""
|
|
register: result
|
|
failed_when: not result.changed or result.failed
|
|
|
|
- name: Clear SMB home drive, again
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
smb_home_drive: ""
|
|
register: result
|
|
failed_when: result.changed or result.failed
|
|
|
|
always:
|
|
# CLEANUP
|
|
- name: Remove test users
|
|
ipauser:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: testuser
|
|
state: absent
|