summaryrefslogtreecommitdiffstats
path: root/roles/ands_idm/tasks
diff options
context:
space:
mode:
Diffstat (limited to 'roles/ands_idm/tasks')
-rw-r--r--roles/ands_idm/tasks/setup_ipa.yml6
1 files changed, 5 insertions, 1 deletions
diff --git a/roles/ands_idm/tasks/setup_ipa.yml b/roles/ands_idm/tasks/setup_ipa.yml
index 06fe6da..7641670 100644
--- a/roles/ands_idm/tasks/setup_ipa.yml
+++ b/roles/ands_idm/tasks/setup_ipa.yml
@@ -16,5 +16,9 @@
command: "/usr/sbin/ipa-client-install -p admin -w {{ config.ands_idm_admin_password | quote }} --hostname={{ hostname.stdout }} --domain={{ ands_domain }} --server={{ ands_idm_server }} --enable-dns-updates --mkhomedir --request-cert --unattended"
when:
- ipa_check.rc != 0
-
+# This may break krb authentication for users with exsiting tickets all together until idm server is restarted
+- name: "Enable hostname canonicalization"
+ lineinfile: path="/etc/krb5.conf" regexp="dns_canonicalize_hostname" line=" dns_canonicalize_hostname = true" state="present"
+ notify:
+ - restart sssd