主页
产品
Red Hat Enterprise Linux
10
Using external Red Hat utilities with Identity Management
5.4. Using Ansible to add IdM users to a group that owns NFS shares

5.4. Using Ansible to add IdM users to a group that owns NFS shares

As an Identity Management (IdM) system administrator, you can use Ansible to create a group of users that is able to access NFS shares, and add IdM users to this group.

This example describes how to use an Ansible playbook to ensure that the idm_user account belongs to the developers group, so that idm_user can access the /exports/project NFS share.

Prerequisites

You have root access to the nfs-server.idm.example.com NFS server, which is an IdM client located in the raleigh automount location.
On the control node:
- You are using Ansible version 2.15 or later.
- You have installed the ansible-freeipa package.
- The example assumes that in the ~/MyPlaybooks/ directory, you have created an Ansible inventory file with the fully-qualified domain name (FQDN) of the IdM server.
- The example assumes that the secret.yml Ansible vault stores your ipaadmin_password and that you have access to a file that stores the password protecting the secret.yml file.
The target node, that is the node on which the freeipa.ansible_freeipa module is executed, is part of the IdM domain as an IdM client, server or replica.

Procedure

On your Ansible control node, navigate to the ~/MyPlaybooks/ directory:
```
$ cd ~/MyPlaybooks/
```
Open the automount-location-map-and-key-present.yml file for editing.

In the tasks section, add a task to ensure that the IdM developers group exists and idm_user is added to this group:

[...]
  vars_files:
  - /home/user_name/MyPlaybooks/secret.yml
  tasks:
[...]
  - ipagroup:
     ipaadmin_password: "{{ ipaadmin_password }}"
      name: developers
      user:
      - idm_user
      state: present

Save the file.

Run the Ansible playbook and specify the playbook and inventory files:

$ ansible-playbook --vault-password-file=password_file -v -i inventory automount-location-map-and-key-present.yml

On the NFS server, change the group ownership of the /exports/project directory to developers so that every IdM user in the group can access the directory:
```
# chgrp developers /exports/project
```

5.4. Using Ansible to add IdM users to a group that owns NFS shares

学习

尝试、购买和销售

社区

关于红帽文档

让开源更具包容性

關於紅帽

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links