Commit graph

718 commits

Author SHA1 Message Date
Andreas B. Mundt
a58010d8d2 Fix crap in kadmin ACL. 2019-12-15 18:10:27 +01:00
Andreas B. Mundt
902a87e258 Add optional posix group handling to script. 2019-12-15 08:39:37 +01:00
Andreas B. Mundt
dd284d6abd Use subdirs for user's homes. 2019-12-14 20:26:25 +01:00
Andreas B. Mundt
81337ac0db Move hard-coded numbers to variables. 2019-12-14 19:27:44 +01:00
Andreas B. Mundt
572dd5a3b0 Add LDAP client config and enable pam_umask. 2019-12-14 12:15:29 +01:00
Andreas B. Mundt
98b8d5d6ff Add memberof-overlay to LDAP. 2019-12-13 18:35:00 +01:00
Andreas B. Mundt
0829b1b2e8 Kerberize firefox in the local domain. 2019-12-08 08:49:38 +01:00
Andreas B. Mundt
a485f5119d Add kerberox* to the README. 2019-12-06 20:03:44 +01:00
Andreas B. Mundt
8c896c90e6 Implement posix group for all users in LDAP. 2019-12-01 18:21:24 +01:00
Andreas B. Mundt
43cb4dcf13 Add user import/deletion from file option, minor improvements. 2019-12-01 13:49:36 +01:00
Andreas B. Mundt
6b3c2f0e0f Add commands: Option to remove machine principals, start ldapvi. 2019-11-30 10:42:42 +01:00
Andreas B. Mundt
61e4b1d852 Add kerberize role (providing kerberized ssh so far). 2019-11-29 15:47:45 +01:00
Andreas B. Mundt
be829760c6 Improved DHCP configuration, no static IP addresses. 2019-11-29 14:38:07 +01:00
Andreas B. Mundt
3b3303e96d Kerberize LDAP access. 2019-11-28 17:37:19 +01:00
Andreas B. Mundt
2ff1354fe3 Implement better IP address/network notation. 2019-11-28 16:34:37 +01:00
Andreas B. Mundt
3670bf6597 Provide keytab before touching home directories to avoid lock. 2019-11-27 20:48:05 +01:00
Andreas B. Mundt
7f49b191ac Make 'ldap', 'kerberos' and 'nfs' hostname aliases. 2019-11-27 20:28:00 +01:00
Andreas B. Mundt
9d9da31649 Allow apt-cacher-ng in firewalld. 2019-11-27 18:31:52 +01:00
Andreas B. Mundt
1686bf44e7 Improved password management. Make sure the saved password is used after first setup. 2019-11-27 17:43:58 +01:00
Andreas B. Mundt
954ac5b0e6 Do not deploy LDAP and KDC during installation as it adds too much complexity. 2019-11-26 21:24:11 +01:00
Andreas B. Mundt
284dadc2d3 Cleanup and restructuring. Move pressed-installer tasks to other roles. 2019-11-26 17:19:39 +01:00
Andreas B. Mundt
a0ee0fd90d Add firewalld rules to service roles. 2019-11-24 21:08:08 +01:00
Andreas B. Mundt
ea36c9beaf Use provided ansible variable to determine debian release. 2019-11-24 21:08:08 +01:00
Andreas B. Mundt
f158d8cae1 Add simple script to add/delete users and their group. 2019-11-24 18:39:04 +01:00
Andreas B. Mundt
fbf48f44f3 Fixes and improvements, NFS/KDC/LDAP related. 2019-11-24 18:39:04 +01:00
Andreas B. Mundt
5d5f75e0c8 Do not preseed desktop environment, leave this to the ansible role. 2019-11-21 17:19:28 +01:00
Andreas B. Mundt
ed8b7a7fa6 Use ansible_domain everywhere and bail out if it is empty. 2019-11-21 15:47:08 +01:00
Andreas B. Mundt
bbcf45bbeb Implement basic LAN client. 2019-11-20 20:41:52 +01:00
Andreas B. Mundt
ce6bd53319 Minor fixes and improvements, mostly KDC/LDAP related. 2019-11-18 17:31:17 +01:00
Andreas B. Mundt
ece5bca5b5 Implement NFS4 server role. 2019-11-17 19:12:22 +01:00
Andreas B. Mundt
7e1332ee46 Minor fixes for KDC-LDAP. 2019-11-17 18:25:43 +01:00
Andreas B. Mundt
18067d8df3 Implement Kerberos KDC-LDAP server role. 2019-11-17 11:40:22 +01:00
Andreas B. Mundt
0597d178e0 Implement LDAP server role. 2019-11-17 11:31:55 +01:00
Andreas B. Mundt
b3b8d3d342 Add KDE plasma as another kiosk system option. 2019-10-29 10:35:16 +01:00
Andreas B. Mundt
fef999e7fe Remove locale 'tr', keep 'de' as example. 2019-10-25 22:04:22 +02:00
Andreas B. Mundt
0ff0ff1c1b Set hostname from boot parameters. 2019-10-25 22:04:22 +02:00
Andreas B. Mundt
cce0dfcafb Switch from squid to apt-cacher-ng and from shorewall to firewalld. 2019-10-25 22:04:22 +02:00
Andreas B. Mundt
8ae165e842 Add minimal role to test only preseeding. 2019-10-20 17:20:37 +02:00
Andreas B. Mundt
4fdd640d6e Move variables only relevant for the installation before '---', playbook variable. 2019-06-12 22:46:11 +02:00
Andreas B. Mundt
f0004b6fe9 Make sure hostname can be set manually, cleanup/fixes. 2019-06-09 18:06:45 +02:00
Andreas B. Mundt
0d534d8939 Define playbook explicitly in preseeded command. 2019-06-07 10:14:51 +02:00
Andreas B. Mundt
44a426c383 Fix and simplify package caching. 2019-05-27 18:04:01 +03:00
Andreas B. Mundt
dd89bbb9a4 Generate IP address list automatically. 2019-05-25 22:44:59 +03:00
Andreas B. Mundt
7404d7ace4 Cleanup and minor improvements. 2019-05-25 10:39:32 +03:00
Andreas B. Mundt
fdfd702130 Fix ansible-pull. 2019-05-24 22:38:53 +03:00
Andreas B. Mundt
b75f508adf Use systemd module to enable service. 2019-05-24 22:24:17 +03:00
Andreas B. Mundt
8118b980ec Use variable for installer version. 2019-05-24 22:17:33 +03:00
Andreas B. Mundt
e51f6c5e2d Use systemd service for git repository. 2019-05-24 21:32:24 +03:00
Andreas B. Mundt
d7a1a146dd Updates and fixes for buster. 2019-05-24 21:32:24 +03:00
Andreas B. Mundt
f6471d8556 Remove unattended-upgrades and make local.yml a symlink. 2019-05-21 19:14:21 +03:00