starting auth section

.github/workflows/ansible-lint.yml

@@ -23,7 +23,7 @@ jobs:
           echo 'collections_paths = ./collections' >> ansible.cfg
 
       - name: Install requirements
-        run: ansible-galaxy collection install -r ansible/playbooks/requirements.yml -p collections
+        run: ansible-galaxy install -r ansible/playbooks/requirements.yml
 
       - name: Ansible Lint
         uses: ansible/ansible-lint-action@master

ansible/inventory/idpinventory

@@ -0,0 +1,3 @@
+# Placeholder
+[ipsilon]
+idp.rockylinux.org

ansible/playbooks/init-rocky-system-config.yml

@@ -30,6 +30,9 @@
     - name: Configure harden settings
       include: tasks/harden.yml
 
+    - name: Configure PAM and SSSD
+      include: tasks/authentication.yml
+
   post_tasks:
     - name: Touching run file that ansible has ran here
       file:

ansible/playbooks/requirements.yml

@@ -2,3 +2,6 @@
 collections:
   - freeipa.ansible_freeipa
   - community.general
+
+roles:
+  - name: geerlingguy.mysql

ansible/playbooks/tasks/authentication.yml

@@ -0,0 +1,3 @@
+---
+# Configures PAM and SSSD post-ipa client installation. It is recommended that
+# that we use a custom authselect profile and build it out from there.