copy keytab instead of generating it

This commit is contained in:
Timo Makinen 2019-06-08 17:23:51 +03:00
parent c69316ec6f
commit 8335a9723e

View file

@ -175,10 +175,10 @@
state: started
enabled: true
- name: create slapd keytab
import_role:
name: kerberos/keytab
vars:
keytab: /etc/openldap/slapd.keytab
principals: ["ldap/{{ inventory_hostname }}@{{ kerberos_realm }}"]
- name: copy slapd keytab
copy:
dest: /etc/openldap/slapd.keytab
src: "{{ ansible_private }}/files/keytabs/slapd.keytab"
mode: 0640
owner: root
group: ldap