summaryrefslogtreecommitdiffstats
path: root/roles/ands_idm
diff options
context:
space:
mode:
Diffstat (limited to 'roles/ands_idm')
-rw-r--r--roles/ands_idm/handlers/main.yml2
-rw-r--r--roles/ands_idm/tasks/setup_ipa.yml6
2 files changed, 7 insertions, 1 deletions
diff --git a/roles/ands_idm/handlers/main.yml b/roles/ands_idm/handlers/main.yml
new file mode 100644
index 0000000..a83718c
--- /dev/null
+++ b/roles/ands_idm/handlers/main.yml
@@ -0,0 +1,2 @@
+- name: restart sssd
+ shell: systemctl restart sssd
diff --git a/roles/ands_idm/tasks/setup_ipa.yml b/roles/ands_idm/tasks/setup_ipa.yml
index 06fe6da..7641670 100644
--- a/roles/ands_idm/tasks/setup_ipa.yml
+++ b/roles/ands_idm/tasks/setup_ipa.yml
@@ -16,5 +16,9 @@
command: "/usr/sbin/ipa-client-install -p admin -w {{ config.ands_idm_admin_password | quote }} --hostname={{ hostname.stdout }} --domain={{ ands_domain }} --server={{ ands_idm_server }} --enable-dns-updates --mkhomedir --request-cert --unattended"
when:
- ipa_check.rc != 0
-
+# This may break krb authentication for users with exsiting tickets all together until idm server is restarted
+- name: "Enable hostname canonicalization"
+ lineinfile: path="/etc/krb5.conf" regexp="dns_canonicalize_hostname" line=" dns_canonicalize_hostname = true" state="present"
+ notify:
+ - restart sssd