Merge pull request #107 from oci-hpc/2.10.2_ds_ubuntu_ldap

2.10.2 ds ubuntu ldap

Author: arnaudfroidmont

playbooks/new_nodes.yml

@@ -196,4 +196,11 @@
       when: slurm|default(false)|bool
     - include_role: 
         name: telegraf
-      when: monitoring|default(false)|bool
+      when: monitoring|default(false)|bool
+
+- hosts: all
+  become: true
+  tasks: 
+    - include_role: 
+        name: fix_ldap
+      when: ldap|default(true)|bool

playbooks/resize_add.yml

@@ -198,4 +198,11 @@
       when: slurm|default(false)|bool
     - include_role: 
         name: telegraf
-      when: monitoring|default(false)|bool
+      when: monitoring|default(false)|bool
+
+- hosts: all
+  become: true
+  tasks: 
+    - include_role: 
+        name: fix_ldap
+      when: ldap|default(true)|bool

playbooks/roles/fix_ldap/tasks/main.yml

@@ -0,0 +1,2 @@
+- include: ubuntu.yml
+  when: ansible_distribution == 'Ubuntu'

playbooks/roles/fix_ldap/tasks/ubuntu.yml

@@ -0,0 +1,16 @@
+---
+- name: restart nscd
+  become: true
+  systemd:
+    name: nscd
+    state: restarted
+    daemon_reload: true
+    enabled: true
+
+- name: restart sssd
+  become: true
+  service:
+    name: sssd
+    state: restarted
+    daemon_reload: true
+    enabled: true

playbooks/roles/sssd/tasks/debian.yml

@@ -15,6 +15,7 @@
     owner: 'root'
     group: 'root'
     mode: '0600'
+  notify: restart sssd
 
 - name: Copy CA certificate
   copy:
@@ -53,11 +54,22 @@
   include_role: 
     name: safe_yum
 
+- name: Enable sssd service
+  systemd:
+    name: sssd
+    enabled: "yes"
+
+- name: Start sssd service
+  systemd:
+    name: sssd
+    state: started
+
 - name: Update sshd configuration
   lineinfile: 
     path: /etc/ssh/sshd_config
     regexp: '^PasswordAuthentication'
     line: PasswordAuthentication no
   notify: 
+    - restart sshd
     - restart ns daemons
     - restart login services

playbooks/site.yml

@@ -305,3 +305,10 @@
     - include_role: 
         name: slurm
       when: slurm|default(false)|bool
+
+- hosts: all
+  become: true
+  tasks: 
+    - include_role: 
+        name: fix_ldap
+      when: ldap|default(true)|bool