36.15. Using Ansible to give an IdM group access to the sound card on an IdM client

1. On your Ansible control node, create an give-idm-group-access-to-sound-card-on-idm-client.yml playbook with the following tasks:

   ---
   - name: Playbook to give IdM group access to sound card on IdM client
     hosts: ipaserver
     become: false
   
     tasks:
     - name: Ensure the audio group exists in IdM
       ipagroup:
         ipaadmin_password: "{{ ipaadmin_password }}"
         name: audio
   
     - name: Ensure idview_for_host01 exists and is applied to host01.idm.example.com
       ipaidview:
         ipaadmin_password:  "{{ ipaadmin_password }}"
         name: idview_for_host01
         host: host01.idm.example.com
   
     - name: Add an override for the IdM audio group with GID 63 to idview_for_host01
       ipaidoverridegroup:
         ipaadmin_password: "{{ ipaadmin_password }}"
         idview: idview_for_host01
         anchor: audio
         GID: 63

2. Save the file.

3. Run the Ansible playbook. Specify the playbook file, the file storing the password protecting the secret.yml file, and the inventory file:

   $ ansible-playbook --vault-password-file=password_file -v -i inventory give-idm-group-access-to-sound-card-on-idm-client.yml

Verification

1. On an IdM client, obtain IdM administrator’s credentials:

   $ kinit admin
   Password:

2. Create a test IdM user:

   $ ipa user-add testuser --first test --last user --password
   User login [tuser]:
   Password:
   Enter Password again to verify:
   ------------------
   Added user "tuser"
   ------------------

3. Add the user to the IdM audio group:

   $ ipa group-add-member --tuser audio

4. Log in to host01.idm.example.com as tuser:

   $ ssh tuser@host01.idm.example.com

5. Verify the group membership of the user:

   $ id tuser
   uid=702801456(tuser) gid=63(audio) groups=63(audio)