xoxys.pam/tasks/pam.yml

32 lines
1.9 KiB
YAML
Raw Normal View History

2019-11-06 19:26:03 +00:00
---
- block:
- name: Set pam module configuration
pamd:
name: "{{ item.name | default('system-auth') }}"
type: "{{ item.type | default('auth') }}"
module_path: "{{ item.module_path | default('pam_unix.so') }}"
control: "{{ item.control }}"
new_type: "{{ item.new_type | default(omit) }}"
new_module_path: "{{ item.new_module_path | default(omit) }}"
new_control: "{{ item.new_control | default(omit) }}"
state: "{{ item.state | default('args_present') }}"
module_arguments: "{{ item.module_arguments | default(omit) }}"
loop: "{{ pam_settings + pam_settings_extra }}"
2019-11-10 12:26:43 +00:00
loop_control:
label: "{{ item.name | default('system-auth') }}:{{ item.state | default('args_present') }}: {{ item.new_type | default(item.type) | default('auth') }} {{ item.new_control | default(item.control) }} {{ item.new_module_path | default(item.module_path) | default('pam_unix.so') }} {{ item.module_arguments | default([]) | join(' ') }}"
2019-11-09 13:02:22 +00:00
- name: Auto-update items with state before/after
pamd:
name: "{{ item.name | default('system-auth') }}"
type: "{{ item.new_type }}"
module_path: "{{ item.new_module_path }}"
control: "{{ item.new_control }}"
state: updated
module_arguments: "{{ item.module_arguments | default(omit) }}"
loop: "{{ pam_settings + pam_settings_extra }}"
2019-11-10 12:26:43 +00:00
loop_control:
label: "{{ item.name | default('system-auth') }}:{{ item.state | default('args_present') }}: {{ item.new_type | default(item.type) | default('auth') }} {{ item.new_control | default(item.control) }} {{ item.new_module_path | default(item.module_path) | default('pam_unix.so') }} {{ item.module_arguments | default([]) | join(' ') }}"
2019-11-09 13:06:06 +00:00
when: item.state | default("args_present") == "before" or item.state | default("args_present") == "after"
2019-11-06 19:26:03 +00:00
become: True
become_user: root