|
|
- - name: configure libpam-ldap
- debconf:
- name: 'libpam-ldap'
- question: '{{ item.key }}'
- vtype: 'string'
- value: '{{ item.value }}'
- with_dict:
- libpam-ldap/bindpw: (password omitted)
- libpam-ldap/rootbindpw: (password omitted)
- libpam-ldap/rootbinddn:
- libpam-ldap/dbrootlogin: false
- libpam-ldap/dblogin: false
- libpam-ldap/override: 'true'
- libpam-ldap/pam_password: crypt
- libpam-ldap/binddn:
- shared/ldapns/ldap_version: 3
- shared/ldapns/ldap-server: ldap://{{ ldap_server }}/
- shared/ldapns/base-dn: dc=lilik,dc=it
- notify:
- - update libpam-ldap configuration
-
- - name: configure libnss-ldap
- debconf:
- name: 'libnss-ldap'
- question: '{{ item.key }}'
- vtype: 'string'
- value: '{{ item.value }}'
- with_dict:
- libnss-ldap/bindpw: (password omitted)
- libnss-ldap/rootbindpw: (password omitted)
- libnss-ldap/override: 'true'
- libnss-ldap/confperm: true
- libnss-ldap/dbrootlogin: false
- libnss-ldap/nsswitch:
- libnss-ldap/binddn:
- libnss-ldap/rootbinddn:
- libnss-ldap/dblogin: false
- shared/ldapns/ldap_version: 3
- shared/ldapns/ldap-server: ldap://{{ ldap_server }}/
- shared/ldapns/base-dn: dc=lilik,dc=it
- notify:
- - update libnss-ldap configuration
-
- - name: set default shell to bash in skel
- lineinfile:
- insertbefore: BOF
- dest: /etc/skel/.profile
- line: 'SHELL=/bin/bash exec /bin/bash'
- regexp: '^SHELL='
-
- - name: create user home on login
- template:
- src: pam-mkhomedir.j2
- dest: /usr/share/pam-configs/mkhomedir
- notify: pam-auth-update
-
- - name: enable nss ldap passwd
- lineinfile:
- dest: /etc/nsswitch.conf
- line: 'passwd: compat ldap'
- regexp: '^passwd:'
- notify: restart nscd
-
- - name: enable nss ldap group
- lineinfile:
- dest: /etc/nsswitch.conf
- line: 'group: compat ldap'
- regexp: '^group:'
- notify: restart nscd
-
- - name: install pam ldap packages
- apt:
- name: "{{ item }}"
- state: present
- update_cache: yes
- cache_valid_time: 3600
- with_items:
- - libpam-ldap
- - libnss-ldap
- # TODO: log, add a centralized log server
- - rsyslog
|
