ansible_tower_genie_kerberos

Description

An Ansible role to configure Ansible Tower nodes to manage Windows systems.

Variables

Name	Required	Default Value	Type	Description
krb_realms	yes	N/A	List of Dictionaries	Used for storing the realm(domain) name and its domain controllers. A single domain controller can be specified if that is the only available option, but more than one is preferable. See example usage below.
krb_default_realm	no	undefined	string	If a default realm(domain) is required to be specified this can be set. Otherwise it remains unset in the krb5.conf.
krb_dns_lookup_realm	yes	"false"	string	Whether or not to lookup DNS via realm.
krb_ticket_lifetime	yes	"24h"	string	Sets the default lifetime for initial ticket requests.
krb_renew_lifetime	yes	"7d"	string	Kerberos renewable ticket lifetime.
krb_forwardable	yes	"true"	string	Forwardable kerberos tickets.
krb_rdns	yes	"false"	string	Whether or not to use rdns.

Example use of krb_realms

Note that the first listed item in each listed realm's dc_fqdns list will be set as the realm's admin_server.

krb_realms:
  - name: "MYDOMAIN.COM"
    dc_fqdns:
      - "foo1.bar.mydomain.com"
      - "foo2.bar.mydomain.com"
  - name: "YOURDOMAIN.COM"
    dc_fqdns:
      - "ad1.yourdomain.com"
      - "ad2.yourdomain.com"

Tags

If you would like to skip the check of EPEL and python-pip installation, you can skip the tag prerequisites with --skip-tags prerequisites option at run-time.

HTTP/HTTPS Proxy Settings

If you require a proxy server to reach external repositories located on the internet, ensure that you have set them either on the server running the playbook, or in the playbook including the role.

Example Playbook

---
- hosts: towers
# If you need proxy settings to install packages from the internet:
# The following 3 lines are optional
  environment:
    http_proxy: "yourproxyurl:andport"
    https_proxy: "yourproxyurl:andport"
  roles:
    - role: ahuffman.ansible-tower-kerberos
      krb_realms:
        - name: "MYDOMAIN.COM"
          dc_fqdns:
            - "foo1.bar.mydomain.com"
            - "foo2.bar.mydomain.com"
        - name: "YOURDOMAIN.COM"
          dc_fqdns:
            - "ad1.yourdomain.com"
            - "ad2.yourdomain.com"

License

MIT

Author

Andrew J. Huffman