Merge pull request #14971 from rocky-linux/develop

add in binder adhoc
This commit is contained in:
Louis Abel 2021-01-17 15:18:45 -07:00 committed by GitHub
commit 3812c14808
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 48 additions and 0 deletions

View File

@ -0,0 +1,41 @@
---
# This playbook is meant to be used with callable variables, like adhoc or AWX.
# What: Creates a binder account for read-only binds
# What is expected:
# -> ipa_binder_name: Bind account name, in the form of name_binder
# -> ipa_binder_password: Bind account password
- name: Create binder account
hosts: ipaserver
become: true
tasks:
- name: "Check for user variables"
assert:
that:
- ipa_binder_name | mandatory
- ipa_binder_password | mandatory
success_msg: "Required variables provided"
fail_msg: "We are missing user information"
- name: "Creating bind account template - binder"
template:
src: "tmp/binder_template.update"
dest: "/tmp/binder.update"
owner: root
group: root
mode: '0600'
tags:
- users
- name: "Adding in the bind account"
command: "/usr/sbin/ipa-ldap-updater /tmp/binder.update"
register: bind_account
changed_when: "bind_account.rc == 0"
tags:
- users
- name: "Remove template"
file:
path: "/tmp/binder.update"
state: absent

View File

@ -0,0 +1,7 @@
dn: uid={{ ipa_binder_name }},cn=sysaccounts,cn=etc,dc=rockylinux,dc=org
add:objectclass:account
add:objectclass:simplesecurityobject
add:uid:{{ ipa_binder_name }}
add:userPassword:{{ ipa_binder_password }}
add:passwordExpirationTime:20380119031407Z
add:nsIdleTimeout:0