Skip to content

Commit

Permalink
Merge pull request #12159 from marcusburghardt/sssd_enable_smartcards
Browse files Browse the repository at this point in the history
Simplify use of ansible_ensure_pam_module_option macro
  • Loading branch information
jan-cerny authored Jul 16, 2024
2 parents 2e3b54d + 068e6e7 commit 754da0c
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@
- name: '{{{ rule_title }}} - Remediate by directly editing PAM files'
block:
{{{ ansible_ensure_pam_module_option('/etc/pam.d/smartcard-auth', 'auth', 'sufficient', 'pam_sss.so', 'allow_missing_name', '', '') | indent(4) }}}
{{{ ansible_ensure_pam_module_option('/etc/pam.d/system-auth', 'auth', '\[success=done authinfo_unavail=ignore ignore=ignore default=die\]', 'pam_sss.so', 'try_cert_auth', '', '') | indent(4) }}}
{{{ ansible_ensure_pam_module_option('/etc/pam.d/system-auth', 'auth', '[success=done authinfo_unavail=ignore ignore=ignore default=die]', 'pam_sss.so', 'try_cert_auth', '', '') | indent(4) }}}
when:
- not result_authselect_present.stat.exists
{{% endif %}}

0 comments on commit 754da0c

Please sign in to comment.