ansible/xoxys.pve
1
0
Fork 0
Code Issues Pull Requests Releases Activity

fix auth template

Browse Source
This commit is contained in:
Robert Kaussow 2018-11-12 23:47:46 +01:00
parent 8b3db96d9a
commit ef87dbb746
1 changed files with 21 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
templates/etc/pve/domains.cfg.j2
View File

@ -1,13 +1,29 @@
# {{ ansible_managed }} # {{ ansible_managed }}
pam: pam {% if pve_auth_pam_enabled %}
comment Linux PAM standard authentication pam: {{ pve_auth_pam_realm }}
comment {{ pve_auth_pam_description }}
default {{ 1 if pve_auth_pam_is_default else 0 }}
{% if pve_auth_pam_tfa_oath_enabled and not pve_auth_pam_tfa_yubico_enabled %}
tfa type=oath,step={{ pve_auth_pam_tfa_oath_timestep }},digits={{ pve_auth_pam_tfa_oath_pwlength }}
{% elif pve_auth_pam_tfa_yubico_enabled and not pve_auth_pam_tfa_oath_enabled %}
tfa type=yubico,id={{ pve_auth_pam_tfa_yubico_api_id }},key={{ pve_auth_pam_tfa_yubico_api_key }},url={{ pve_auth_pam_tfa_yubico_url }}
{% endif %}
{% endif %}
pve: pve {% if pve_auth_pve_enabled %}
comment Proxmox VE authentication server pve: {{ pve_auth_pve_realm }}
comment {{ pve_auth_pve_description }}
default {{ 1 if pve_auth_pve_is_default else 0 }}
{% if pve_auth_pve_tfa_oath_enabled and not pve_auth_pve_tfa_yubico_enabled %}
tfa type=oath,step={{ pve_auth_pve_tfa_oath_timestep }},digits={{ pve_auth_pve_tfa_oath_pwlength }}
{% elif pve_auth_pve_tfa_yubico_enabled and not pve_auth_pve_tfa_oath_enabled %}
tfa type=yubico,id={{ pve_auth_pve_tfa_yubico_api_id }},key={{ pve_auth_pve_tfa_yubico_api_key }},url={{ pve_auth_pve_tfa_yubico_url }}
{% endif %}
{% endif %}
{% if pve_auth_ldap_enabled %} {% if pve_auth_ldap_enabled %}
ldap: {{ pve_auth_ldap_relam }} ldap: {{ pve_auth_ldap_realm }}
comment {{ pve_auth_ldap_description }} comment {{ pve_auth_ldap_description }}
base_dn {{ pve_auth_ldap_base_dn }} base_dn {{ pve_auth_ldap_base_dn }}
server1 {{ pve_auth_ldap_primary_server }} server1 {{ pve_auth_ldap_primary_server }}