antpro/infra
1
0
Fork 0
forked from saratov/infra
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #9 from altlinuxteam/kerberos5-idempotency

Browse Source 
Make Kerberos 5 role idempotent
This commit is contained in:
omgbebebe 2019-07-17 17:05:48 +04:00 committed by GitHub
commit 1208e753f8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/kerberos5/tasks/master.yml
View File

@ -22,10 +22,16 @@
group: root group: root
mode: 0644 mode: 0644
- name: Check local Kerberos 5 database existence
stat:
path: '{{ kdc_var_path }}/principal'
register: stat_kdc_db
# We need to initialize principal database on the new system in order # We need to initialize principal database on the new system in order
# 'krb5kdc` to work. # 'krb5kdc` to work.
- name: Initialize Kerberos 5 local database - name: Initialize Kerberos 5 local database
shell: "kdb5_util create -P '{{ krb5_admin_pass }}' -r {{ krb5_realm | upper }} -s" shell: "kdb5_util create -P '{{ krb5_admin_pass }}' -r {{ krb5_realm | upper }} -s"
when: stat_kdc_db.stat.exists == False
# We must configure Kerberos 5 realm properly for krb5kdc # We must configure Kerberos 5 realm properly for krb5kdc
- name: Configure krb5kdc - name: Configure krb5kdc