blob: 1975b0b7279146d358d8c88efcfa7e33bf8c8431 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
SSH
===
Description
-----------
The `ssh` role configures SSH clients to use GSSAPI authentication for hosts
within the local FreeIPA domain.
Variables
---------
This role **accepts** the following variables:
Variable | Default | Description
------------------------|----------------------------|------------
`ssh_canonical_domains` | `['{{ ansible_domain }}']` | Host domains to canonicalize for Kerberos/GSSAPI
Usage
-----
Example playbook:
````yaml
- name: configure kerberized ssh
hosts: all
roles:
- role: ssh
vars:
ssh_canonical_domains:
- ipa.example.com
````
|