Ansible linux_ad_auth role

This is an Ansible role which setups system authentication to use Windows Active Directory.

Role Variables

A list of all the default variables for this role is available in defaults/main.yml.

Example Playbook

- name: Sample of sssd role  
  hosts: the-acme-host-for-testing
  tasks:
    - include_role:
        name: amtega.linux_ad_auth
      vars:
        linux_ad_auth_domain: acme.com
        linux_ad_auth_host_netbios_name: tah-for-testing
        linux_ad_auth_sssd_simple_allow_groups:
          - linux-administrator
        linux_ad_auth_host_ou: >-
          OU=Linux,OU=Servers,OU=Resoures,DC=acme,DC=com
        linux_ad_auth_user: admin
        linux_ad_auth_password: password
        linux_ad_auth_state: present

Testing

Tests are based on molecule with vagrant virtual machines.

To run the the tests you need and inventory with the following set of variables:

linux_ad_auth_tests_domain: windows domain
linux_ad_auth_tests_host_netbios_name: netbios name to use for the host
linux_ad_auth_tests_sssd_simple_allow_groups: windows group you want to allow to autenticate on the host
linux_ad_auth_tests_host_ou: OU where to put the computer object within active directory
linux_ad_auth_tests_user: windows user to connect
linux_ad_auth_tests_password: password for the previous user
linux_ad_auth_tests_intermediate: windows host fullfilling the ansible requirements documented in https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html. Also, you must define in the inventory for this host the neccessary variables to connect.

Additionally, to run test you must setup the following environment variables:

LINUX_AD_AUTH_TESTS_HOST: host to use to test the role.
LINUX_AD_AUTH_TESTS_HOST_NETBIOS_NAME: netbios name to use for the host
ANSIBLE_INVENTORY: path to the inventory
ANSIBLE_VAULT_PASSWORD_FILE: path to the file containing the vault password required for the previous inventory

cd amtega.linux_ad_auth

LINUX_AD_AUTH_TESTS_HOST=mytestinghost LINUX_AD_AUTH_TESTS_HOST_NETBIOS_NAME=mynetbiosname ANSIBLE_INVENTORY=~/myinventory ANSIBLE_VAULT_PASSWORD_FILE=~/myvaultpassword molecule test --all

License

This role is free software: you can redistribute it and/or modify it under the terms of:

GNU General Public License version 3, or (at your option) any later version; or the European Union Public License, either Version 1.2 or – as soon they will be approved by the European Commission subsequent versions of the EUPL.

This role is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details or European Union Public License for more details.

Author Information

Daniel Sánchez Fábregas.
Juan Antonio Valiño García.
José Enrique Mourón Regueira.
PowerShell script based on Brian Scholer (@briantist) work.