add support for creating stash files

This commit is contained in:
Timo Makinen 2019-05-29 01:56:26 +03:00
parent 45d23c90af
commit bb7b20c65e

View file

@ -16,6 +16,18 @@
group: "{{ ansible_wheel }}" group: "{{ ansible_wheel }}"
notify: restart kdc notify: restart kdc
- name: store ldap auth credentials
shell: "( echo '{{ kerberos_kdc_pass }}' ; echo '{{ kerberos_kdc_pass }}' ) | kdb5_ldap_util stashsrvpw uid=krb5kdc,cn={{ kerberos_realm }},ou=System,{{ ldap_basedn }}"
args:
creates: "/var/kerberos/krb5kdc/.k5.ldap.{{ kerberos_realm|lower() }}"
no_log: true
- name: store kdc master key
shell: "echo '{{ kerberos_master_pass }}' | kdb5_util stash"
args:
creates: "/var/kerberos/krb5kdc/.k5.{{ kerberos_realm }}"
no_log: true
- name: enable kerberos service - name: enable kerberos service
service: service:
name: krb5kdc name: krb5kdc