aboutsummaryrefslogtreecommitdiffstats
path: root/roles/ssh/README.md
blob: 1975b0b7279146d358d8c88efcfa7e33bf8c8431 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
SSH
===

Description
-----------

The `ssh` role configures SSH clients to use GSSAPI authentication for hosts
within the local FreeIPA domain.


Variables
---------

This role **accepts** the following variables:

Variable                | Default                    | Description
------------------------|----------------------------|------------
`ssh_canonical_domains` | `['{{ ansible_domain }}']` | Host domains to canonicalize for Kerberos/GSSAPI 


Usage
-----

Example playbook:

````yaml
- name: configure kerberized ssh
  hosts: all
  roles:
    - role: ssh
      vars:
        ssh_canonical_domains:
          - ipa.example.com
````