36.13. 使用 Ansible 确保 IdM 用户可以使用两个证书登录到 IdM 客户端

流程

1. 在 Ansible 控制节点上，使用以下内容创建一个 ensure-idmuser-present-in-idview-with-certificates.yml playbook：

   ---
   - name: Ensure both local user and IdM user have access to same files
     hosts: ipaserver
     become: false
     gather_facts: false
   
     tasks:
     - name: Ensure idview_for_host1 is applied to host01.idm.example.com
       ipaidview:
         ipaadmin_password: "{{ ipaadmin_password }}"
         name: idview_for_host01
         host: host01.idm.example.com
   
     - name: Ensure an IdM user is present in ID view with two certificates
       ipaidoverrideuser:
         ipaadmin_password: "{{ ipaadmin_password }}"
         idview: idview_for_host01
         anchor: idm_user
         certificate:
         - "{{ lookup('file', 'cert1.b64', rstrip=False) }}"
         - "{{ lookup('file', 'cert2.b64', rstrip=False) }}"

   Copy to Clipboard Toggle word wrap

   rstrip=False 指令会导致不会从查找文件末尾删除空格。

2. 保存该文件。

3. 运行 playbook。指定 playbook 文件、存储保护 secret.yml 文件的密码，以及清单文件：

   $ ansible-playbook --vault-password-file=password_file -v -i inventory ensure-idmuser-present-in-idview-with-certificates.yml

   Copy to Clipboard Toggle word wrap