ansible/xoxys.pve
1
0
Fork 0
Code Issues Pull Requests Releases Activity

realms for pve and pam cant be renamed

Browse Source
This commit is contained in:
Robert Kaussow 2018-11-14 22:07:57 +01:00
parent abcd135615
commit 377a41a89c
3 changed files with 3 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main.yml
View File

@ -20,8 +20,8 @@ pve_nginx_tls_enabled: True
pve_nginx_tls_cert_file: mycert.pem
pve_nginx_tls_key_file: mykey.pem
# Configure pam auth
pve_auth_pam_is_default: True
pve_auth_pam_realm: pam
pve_auth_pam_description: Linux PAM standard authentication
pve_auth_pam_tfa_oath_enabled: False
@ -34,7 +34,6 @@ pve_auth_pam_tfa_yubico_enabled: False
# pve_auth_pam_tfa_yubico_url: http://127.0.0.1:8080
pve_auth_pve_is_default: False
pve_auth_pve_realm: pve
pve_auth_pve_description: Linux pve standard authentication
pve_auth_pve_tfa_oath_enabled: False

4
templates/etc/pve/domains.cfg.j2
View File

@ -1,5 +1,5 @@
#jinja2:lstrip_blocks: True
pam: {{ pve_auth_pam_realm }}
pam: pam
comment {{ pve_auth_pam_description }}
default {{ 1 if pve_auth_pam_is_default else 0 }}
{% if pve_auth_pam_tfa_oath_enabled and not pve_auth_pam_tfa_yubico_enabled %}
@ -8,7 +8,7 @@ pam: {{ pve_auth_pam_realm }}
tfa type=yubico,id={{ pve_auth_pam_tfa_yubico_api_id }},key={{ pve_auth_pam_tfa_yubico_api_key }},url={{ pve_auth_pam_tfa_yubico_url }}
{% endif %}
pve: {{ pve_auth_pve_realm }}
pve: pve
comment {{ pve_auth_pve_description }}
default {{ 1 if pve_auth_pve_is_default else 0 }}
{% if pve_auth_pve_tfa_oath_enabled and not pve_auth_pve_tfa_yubico_enabled %}

13
vars/main.yml
View File

@ -1,15 +1,2 @@
---
__pve_base_dir: /etc/pve
# __pve_certificates:
# cert:
# name: pveproxy-ssl.pem
# path: /etc/pki/tls/certs
# source: "{{ pve_tls_cert_source }}"
# nodes: "{{ pve_nodes }}"
# mode: "0750"
# key:
# name: pveproxy-ssl.key
# path: /etc/pki/tls/private
# source: "{{ pve_tls_key_source }}"
# nodes: "{{ pve_nodes }}"
# mode: "0600"