blob: a2c926dbc8f737eaa648bf16f61c609eba310f10 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
- name: install freeradius
dnf:
name: '{{ freeradius_packages }}'
state: present
- import_tasks: freeipa.yml
- name: request TLS certificate
include_role:
name: getcert_request
vars:
certificate_service: radius
certificate_path: '{{ freeradius_certificate_path }}'
certificate_key_path: '{{ freeradius_certificate_key_path }}'
certificate_ca_path: '{{ freeradius_certificate_ca_path }}'
certificate_owner: radiusd
certificate_hook: systemctl restart radiusd
- name: generate dhparams
openssl_dhparam:
path: '{{ freeradius_dhparams_path }}'
size: 2048
- name: enable ldap module
file:
src: /etc/raddb/mods-available/ldap
dest: /etc/raddb/mods-enabled/ldap
state: link
- name: generate freeradius configuration
template:
src: etc/raddb/{{ item }}.j2
dest: /etc/raddb/{{ item }}
owner: root
group: radiusd
mode: 0640
loop:
- radiusd.conf
- clients.conf
- mods-available/eap
- mods-available/ldap
- sites-available/inner-tunnel
notify: restart radiusd
- name: create tlscache directory
file:
path: '{{ freeradius_tlscache_dir }}'
state: directory
owner: radiusd
group: radiusd
mode: 0700
- name: set up clean-freeradius-tlscache timer
include_role:
name: systemd_timer
vars:
timer_name: clean-freeradius-tlscache
timer_description: Delete old freeradius tlscache files
timer_on_calendar: daily
timer_exec: find {{ freeradius_tlscache_dir }} -mtime +2 -exec rm -vf {} ;
- name: start freeradius
systemd:
name: radiusd
enabled: yes
state: started
- name: open firewall ports
firewalld:
service: radius
permanent: yes
immediate: yes
state: enabled
tags: firewalld
|
