| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112 |
- # Copyright 2022 Dell Inc. or its subsidiaries. All Rights Reserved.
- #
- # Licensed under the Apache License, Version 2.0 (the "License");
- # you may not use this file except in compliance with the License.
- # You may obtain a copy of the License at
- #
- # http://www.apache.org/licenses/LICENSE-2.0
- #
- # Unless required by applicable law or agreed to in writing, software
- # distributed under the License is distributed on an "AS IS" BASIS,
- # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- # See the License for the specific language governing permissions and
- # limitations under the License.
- ---
- # Usage: check_prerequisites.yml
- return_status: 200
- server_file: "{{ role_path }}/files/.ipavars.yml"
- file_mode: '0644'
- # Usage: firewall_settings.yml
- https_port1: "80/tcp"
- https_port2: "443/tcp"
- ldap_port1: "389/tcp"
- ldap_port2: "636/tcp"
- kerberos_port1: "88/tcp"
- kerberos_port2: "464/tcp"
- kerberos_port3: "88/udp"
- kerberos_port4: "464/udp"
- dns_port1: "53/tcp"
- dns_port2: "53/udp"
- dt_port1: "7389/tcp"
- ntp_port1: "123/udp"
- # Usage: enable_dnf_module.yml
- os_supported_centos: "centos"
- os_supported_rocky: "rocky"
- # Usage: install_packages.yml
- ipa_server_packages:
- - bind
- - bind-dyndb-ldap
- - ipa-server-dns
- - freeipa-server
- # Usage: install_ipa_server.yml
- resolv_conf_path: /etc/resolv.conf
- temp_resolv_conf_path: /tmp/resolv.conf
- ms_ipa_admin_username: admin
- # Usage: ipa_configuration.yml
- sysadmin_sudo_rule: sysadmin_sudo
- sysadmin_sudo_rule_description: "Allow users to run sudo commands"
- sysadmin_user_group: sysadmin
- sysadmin_group_description: "User group with sudo permission"
- # Usage: session_timeout.yml
- sshd_conf_file: /etc/ssh/sshd_config
- # Usage: configure_alerting.yml
- mail_packages:
- - mailx
- - postfix
-
- # Usage: install_snoopy.yml
- snoopy_packages:
- - gcc
- - gzip
- - make
- - procps
- - socat
- - tar
- - wget
- snoopy_mode: 0755
- snoopy_url: https://github.com/a2o/snoopy/raw/install/install/install-snoopy.sh
- snoopy_path: /var/lib
- # Usage: user_monitor.yml
- psacct: psacct
- acct: acct
- # Usage: install_389ds.yml
- ds389_packages:
- - 389-ds
- - db48-utils
- - python3-argcomplete
- ldap1_search_key: "No such instance"
- ds389_pwpolicy_search_key: "passwordlockoutduration: {{ lockout_duration }}"
- sssd_install_search_key: running
- ldap1_config_path: "{{ role_path }}/files/ldap1.inf"
- ldap_instance: ldap1
- ldap1_output_path: /var/log/ldap1_output.txt
- ldap_services:
- - ldap
- - ldaps
- dsrc_path: /root/.dsrc
- kerberos_packages:
- - krb5
- - krb5-server
- - krb5-client
- kerberos_principal_path: /var/lib/kerberos/krb5kdc/principal
- kerberos_conf_path: /etc/krb5.conf
- kerberos_env_path: /usr/lib/mit/sbin/
- sssd_packages:
- - sssd
- - sssd-ldap
- admin_group_name: server_admins
- sssd_file_mode: 0600
- sssd_config_path: /etc/sssd/sssd.conf
- # Usage: restrict_nonessentials.yml
- service_status: ['enabled','alias','static','indirect','enabled-runtime','active','inactive']
|
