dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

samba-dc: Manage sudoers 

Domain controllers only allow users in the *Domain Admins* AD group to
use `sudo` by default.  *dustin* and *jenkins* need to be able to apply
configuration policy to these machines, but they are not members of said
group.
btop
Dustin 2022-12-23 08:47:31 -06:00
parent bc4c7edbad
commit 90f9e5eba5
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
group_vars/samba-dc.yml
View File

@ -21,3 +21,7 @@ collectd_processes:
- name: smbd - name: smbd
- name: krb5kdc - name: krb5kdc
- name: winbindd - name: winbindd
admin_users:
- 'PYROCUFFLINK\dustin'
- 'PYROCUFFLINK\jenkins'

1
samba-dc.yml
View File

@ -4,6 +4,7 @@
- kerberos - kerberos
- dch-selinux - dch-selinux
- samba-dc - samba-dc
- sudo
tasks: tasks:
- name: set samba configuration facts - name: set samba configuration facts
set_fact: set_fact: