2019-02-05 08:35:45 +01:00
|
|
|
---
|
|
|
|
|
# Install and configure main LDAP tools
|
2019-08-29 07:03:05 +02:00
|
|
|
- include_tasks: install_ldap.yml
|
2019-02-05 08:35:45 +01:00
|
|
|
|
|
|
|
|
# Filter who can access server and sudo on groups
|
|
|
|
|
- include_tasks: 1_group_security.yml
|
|
|
|
|
|
|
|
|
|
# Some userland scripts specific to LDAP install
|
|
|
|
|
- include_tasks: 2_userland_scripts.yml
|
|
|
|
|
|
|
|
|
|
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=568577
|
|
|
|
|
- name: Ensure home directories are created upon login
|
|
|
|
|
lineinfile:
|
|
|
|
|
dest: /etc/pam.d/common-account
|
|
|
|
|
regexp: 'pam_mkhomedir\.so'
|
|
|
|
|
line: "session required pam_mkhomedir.so skel=/etc/skel/ umask=0077"
|
|
|
|
|
|
|
|
|
|
# If LDAP crashes
|
|
|
|
|
- name: Install SSH keys for root account
|
|
|
|
|
authorized_key:
|
|
|
|
|
user: root
|
|
|
|
|
key: "{{ ssh_pub_keys }}"
|
|
|
|
|
state: present
|
|
|
|
|
# exclusive: True
|
