Merge pull request #9 from altlinuxteam/kerberos5-idempotency

Make Kerberos 5 role idempotent
This commit is contained in:
omgbebebe 2019-07-17 17:05:48 +04:00 committed by GitHub
commit 1208e753f8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -22,10 +22,16 @@
group: root
mode: 0644
- name: Check local Kerberos 5 database existence
stat:
path: '{{ kdc_var_path }}/principal'
register: stat_kdc_db
# We need to initialize principal database on the new system in order
# 'krb5kdc` to work.
- name: Initialize Kerberos 5 local database
shell: "kdb5_util create -P '{{ krb5_admin_pass }}' -r {{ krb5_realm | upper }} -s"
when: stat_kdc_db.stat.exists == False
# We must configure Kerberos 5 realm properly for krb5kdc
- name: Configure krb5kdc