mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
65937ed8c3
The Variables and also the Return Variables sections contained an extra header with the module name. This is only needed if there are more than one module in the README.
3.1 KiB
3.1 KiB
Pwpolicy module
Description
The pwpolicy module allows to ensure presence and absence of pwpolicies.
Features
- Pwpolicy management
Supported FreeIPA Versions
FreeIPA versions 4.4.0 and up are supported by the ipapwpolicy module.
Requirements
Controller
- Ansible version: 2.8+
Node
- Supported FreeIPA version (see above)
Usage
Example inventory file
[ipaserver]
ipaserver.test.local
Example playbook to ensure presence of pwpolicies for exisiting group ops:
tasks:
- name: Ensure presence of pwpolicies for group ops
ipapwpolicy:
ipaadmin_password: SomeADMINpassword
name: ops
minlife: 7
maxlife: 49
history: 5
priority: 1
lockouttime: 300
minlength: 8
maxfail: 3
Example playbook to ensure absence of pwpolicies for group ops:
---
- name: Playbook to handle pwpolicies
hosts: ipaserver
become: true
tasks:
# Ensure absence of pwpolicies for group ops
- ipapwpolicy:
ipaadmin_password: SomeADMINpassword
name: ops
state: absent
Example playbook to ensure maxlife is set to 49 in global policy:
---
- name: Playbook to handle pwpolicies
hosts: ipaserver
become: true
tasks:
# Ensure maxlife is set to 49 in global policy
- ipapwpolicy:
ipaadmin_password: SomeADMINpassword
maxlife: 49
Variables
| Variable | Description | Required |
|---|---|---|
ipaadmin_principal |
The admin principal is a string and defaults to admin |
no |
ipaadmin_password |
The admin password is a string and is required if there is no admin ticket available on the node | no |
ipaapi_context |
The context in which the module will execute. Executing in a server context is preferred. If not provided context will be determined by the execution environment. Valid values are server and client. |
no |
ipaapi_ldap_cache |
Use LDAP cache for IPA connection. The bool setting defaults to yes. (bool) | no |
name | cn |
The list of pwpolicy name strings. If name is not given, global_policy will be used automatically. |
no |
maxlife | krbmaxpwdlife |
Maximum password lifetime in days. (int) | no |
minlife | krbminpwdlife |
Minimum password lifetime in hours. (int) | no |
history | krbpwdhistorylength |
Password history size. (int) | no |
minclasses | krbpwdmindiffchars |
Minimum number of character classes. (int) | no |
minlength | krbpwdminlength |
Minimum length of password. (int) | no |
priority | cospriority |
Priority of the policy, higher number means lower priority. (int) | no |
maxfail | krbpwdmaxfailure |
Consecutive failures before lockout. (int) | no |
failinterval | krbpwdfailurecountinterval |
Period after which failure count will be reset in seconds. (int) | no |
lockouttime | krbpwdlockoutduration |
Period for which lockout is enforced in seconds. (int) | no |
state |
The state to ensure. It can be one of present or absent, default: present. |
yes |
Authors
Thomas Woerner