james/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

ipa / client: fedora systems use root:sssd ownership

Browse source 
On rhel the sssd dropin files (which need to be the same owner/group as
the main sssd.conf file) are root:root, but on fedora they are
root:sssd. So, split out this task to handle the two different cases.

Assisted-by: claude
(I had it generate this, and it actually did a reasonable job I think)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-08-08 11:52:58 -07:00
commit db0e5eb546
1 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
roles/ipa/client/tasks/main.yml
View file

@ -73,7 +73,7 @@
- config
run_once: yes
- name: Ensure that nss knows to skip certain users (f41/rhel)
- name: Ensure that nss knows to skip certain users (rhel)
ansible.builtin.template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=root group=root
tags:
- ipa/client
@ -82,7 +82,18 @@
notify:
- Restart sssd
- Clean sss caches
when: ansible_distribution_major_version|int >= 41 or ansible_distribution == 'RedHat'
when: ansible_distribution == 'RedHat'
- name: Ensure that nss knows to skip certain users (f41+)
ansible.builtin.template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=root group=sssd
tags:
- ipa/client
- config
- fedora-nss-ignore
notify:
- Restart sssd
- Clean sss caches
when: ansible_distribution == 'Fedora' and ansible_distribution_major_version|int >= 41
- name: Ensure that nss knows to skip certain users (f40)
ansible.builtin.template: src=fedora-nss-ignore.conf.j2 dest=/etc/sssd/conf.d/fedora-nss-ignore.conf mode=600 owner=root group=root