ansible-freeipa/ensure-sudorule-runasuser-is-present.yml at 5bf93d2be2da2fc3dd23536fe3f808d7237905be - ansible-freeipa - Gitea: Git with a cup of tea

internet/ansible-freeipa

mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-06-11 11:15:55 +00:00

Files

Rafael Guterres Jeffman dc0a5585fb Add missing attributes to ipasudorule.

This patch adds the following attributes to ipasudorule:

    - order
    - sudooption
    - runasuser
    - runasgroup

It also fixes behavior of sudocmd assigned to the the sudorule, with the
adittion of the attributes:

    - allow_sudocmds
    - deny_sudocmds
    - allow_sudocmdgroups
    - deny_sudocmdgroups

README-sudorule and tests have been updated to comply with the changes.

2020-02-03 09:14:21 -03:00

14 lines

259 B

YAML

Raw Blame History

 ---
 - name: Tests
   hosts: ipaserver
   become: true
   gather_facts: false
   tasks:
   # Ensure sudorule is present with the given order.
   - ipasudorule:
       ipaadmin_password: MyPassword123
       name: testrule1
       runasuser: admin
       action: member