authconfig-tui for Ansible playbook

[Predrag Punosevac]

Dear All,

I am trying to write an Ansible playbook which will automatically configure LDAP authentication and authorization against my OpenBSD LDAP server (I don't use OpenLDAP server). 

I have being doing this manually for almost 3 years now and I got sick of doing it. Configuring openldap-client on Springdale and sssd from Ansible is pretty trivial as it involves fetching on configuration file a peace, a certificate and starting those services. I am little bit less sure about the last step.

Namely I always manually run autoconfig-tui which for sure changes

/etc/nsswitch 

by adding sssd option

file but also alters

root@gpu3$ diff --brief -Nr  /etc/pam.d/ /root/pam.d/

Files /etc/pam.d/fingerprint-auth and /root/pam.d/fingerprint-auth differ

Files /etc/pam.d/fingerprint-auth-ac and /root/pam.d/fingerprint-auth-ac differ

Files /etc/pam.d/password-auth and /root/pam.d/password-auth differ

Files /etc/pam.d/password-auth-ac and /root/pam.d/password-auth-ac differ

Files /etc/pam.d/smartcard-auth and /root/pam.d/smartcard-auth differ

Files /etc/pam.d/smartcard-auth-ac and /root/pam.d/smartcard-auth-ac differ

Files /etc/pam.d/system-auth and /root/pam.d/system-auth differ

Files /etc/pam.d/system-auth-ac and /root/pam.d/system-auth-ac differ

and possibly /etc/sysconfig/authconfig which I forgot to record 

Could a kind soul please tell me which files need to be altered and what daemons restarted if I don't run authconfig-tui manually?

Thanks,

Predrago

P.S. I just check the box Use LDAP under User Information and box Use LDAP AUthentication under Authentication tab in authconfig-tui and everything works.

[Thomas Uphill]

The tui is for interactive, use the non tui one...

authconfig --updateall

I believe that will do all the necessary restarts.

--t.

--
You received this message because you are subscribed to the Google Groups "springdale-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to springdale-users+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Thomas Uphill
tup...@gmail.com

[Prentice Bisbal]

Adding --test to the end of your authconfig command won't make changes, but will show what changes it will make, which may be useful for making your your capture all the necessary changes in your ansible playbook. Unfortunately the output format isn't very useful, some understanding of all the services  and config files is necessary just to understand the output :(

Prentice 

To unsubscribe from this group and stop receiving emails from it, send an email to springdale-use...@googlegroups.com.