36.11. Using Ansible to configure an ID view that enables an SSH key login on an IdM client

Procedure

1. Create your Ansible playbook file ensure-idoverrideuser-can-login-with-sshkey.yml with the following content:

   ---
   - name: Playbook to manage idoverrideuser
     hosts: ipaserver
     become: false
     gather_facts: false
     vars_files:
     - /home/user_name/MyPlaybooks/secret.yml
   
     tasks:
     - name: Ensure test user idm_user is present in idview idview_for_client1 with sshpubkey
       ipaidoverrideuser:
         ipaadmin_password: "{{ ipaadmin_password }}"
         idview: idview_for_client1
         anchor: idm_user
         sshpubkey:
         - ssh-rsa AAAAB3NzaC1yc2EAAADAQABAAABgQCqmVDpEX5gnSjKuv97Ay ...
     - name: Ensure idview_for_client1 is applied to client1.idm.example.com
       ipaidview:
         ipaadmin_password:  "{{ ipaadmin_password }}"
         name: idview_for_client1
         host: client1.idm.example.com
         action: member

2. Run the playbook. Specify the playbook file, the file storing the password protecting the secret.yml file, and the inventory file:

   $ ansible-playbook --vault-password-file=password_file -v -i <path_to_inventory_directory>/inventory <path_to_playbooks_directory>/ensure-idoverrideuser-can-login-with-sshkey.yml

3. Optional: If you have root credentials, you can apply the new configuration to the IdM client system immediately:

   1. SSH to the client system as root:

      $ ssh root@client1
      Password:

   2. On the IdM client, clear the SSSD cache:

      # sss_cache -E

   3. On the IdM client, restart the SSSD daemon:

      # systemctl restart sssd