WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-26 19:42:55 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,487 Commits 9 Branches 0 Tags
ccbda978113c4e2dacdb5eccc2ef5a7b8f70013a
Commit Graph

281 Commits

Author SHA1 Message Date
Aurélien Bompard
196d20086c Some Ipsilon fixes for the new openid api extension 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-26 12:11:07 +01:00
Aurélien Bompard
94b32cee08 Use our custom info plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-25 18:56:08 +01:00
Aurélien Bompard
fc759fd447 Add the ipsilon script to generate the metadata 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-25 11:15:29 +01:00
Aurélien Bompard
2c04966b51 Adjust the location of the service keytab in ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:58:12 +01:00
Aurélien Bompard
4c5e2d605b Fix the sssd config file 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:31:55 +01:00
Aurélien Bompard
be8535cf05 Fix ipsilon config 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:03:58 +01:00
Aurélien Bompard
7b2c578983 Ipsilon in prod is now on a VM like in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 13:49:33 +01:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-23 16:55:38 +00:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 17:53:42 +00:00
Aurélien Bompard
9e7b8efc2e Get fasPronoun in sssd 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-05 16:47:01 +01:00
Aurélien Bompard
95ca01284a Use a template for ipsilon's sssd.conf instead of replacing lines 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-01-20 10:32:33 +01:00
Patrick Uiterwijk
a07e65afdc Fix saml2 file locations in Ipsilon 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2020-12-01 10:16:08 +01:00
Aurélien Bompard
fadcf80cfd Get the website in ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 17:41:51 +02:00
Aurélien Bompard
a2f74a447e Ipsilon: fix attribute mapping for GPG & SSH 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 11:59:43 +02:00
Aurélien Bompard
dadb90e633 Missing part of bd1cc1d 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-16 09:36:03 +02:00
Aurélien Bompard
e0918f5c96 Ipsilon: set the attribute mapping for openid too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 19:05:08 +02:00
Aurélien Bompard
157f1d2d52 Ipsilon: improve the HBAC rule 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 18:46:51 +02:00
Aurélien Bompard
35f2aeb15d Actually those tasks must be run on the IPA server 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 18:04:21 +02:00
Aurélien Bompard
2cc20bb1af Ipsilon: create a HBAC rule 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 17:51:21 +02:00
Aurélien Bompard
bd1cc1d5f7 Allow redirect on usernames that have an underscore 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 17:25:23 +02:00
Aurélien Bompard
b75b580a49 Ipsilon: re-enable the alias for the well-known dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 15:07:49 +02:00
Aurélien Bompard
78ad8c102a Ipsilon: fix access to the well-known dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 14:55:10 +02:00
Aurélien Bompard
1ca3aff8f1 Ipsilon: configure SSSd 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 12:29:37 +02:00
Aurélien Bompard
f4684a1f07 Ipsilon: fix config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 10:11:36 +02:00
Aurélien Bompard
3a1885bcc9 Ipsilon in staging: deploy config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 09:48:31 +02:00
Aurélien Bompard
1a1f7d79e4 Ipsilon: fix files location 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 14:53:45 +02:00
Aurélien Bompard
62823f5fee Ipsilon: the custom admin db path must exist, let's set it later 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 13:47:39 +02:00
Aurélien Bompard
e73a1bd501 Fix ipsilon config and install script in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 12:19:00 +02:00
Aurélien Bompard
7e7399fb50 Syntax. 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:07:49 +02:00
Aurélien Bompard
ba82363e78 Add a role for ipa clients and use it in Ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:05:19 +02:00
Aurélien Bompard
3ae9b4bd65 We need this plugin obviously 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 09:08:52 +02:00
Aurélien Bompard
47d4923de9 Undefined variable 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 17:06:44 +02:00
Aurélien Bompard
373d9385e1 Missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 16:50:13 +02:00
Aurélien Bompard
ae35433095 Missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-06 10:54:25 +02:00
Aurélien Bompard
d1edc6db3d Prepare ipsilon for a VM deployment in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-05 17:24:56 +02:00
Kevin Fenzi
56489ef2c3 ipsilon: comment out for now all the old rhel7 python2 tasks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 15:08:54 -07:00
Kevin Fenzi
7d9c26fe51 ipsilon: no libsemanage-python in f32 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:57:14 -07:00
Aurélien Bompard
9b4832feee Ipsilon: Fix the attribute mapping 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-17 17:03:55 +02:00
Aurélien Bompard
2baa486616 Fix case in configuration 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-17 11:44:32 +02:00
Aurélien Bompard
482c0f799c Don't get user info from LDAP, use FASJSON 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:44:15 +02:00
Aurélien Bompard
b2df514b95 Ipsilon: rename the service keytab file for coherence 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:28:21 +02:00
Aurélien Bompard
ea064cbdc6 Ipsilon: don't use ldaps 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:57:16 +02:00
Aurélien Bompard
3ba34383b3 Ipsilon: configure the LDAP auth plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:41:33 +02:00
Aurélien Bompard
07f4977aac Ipsilon: remove FAS auth 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 13:20:45 +02:00
Aurélien Bompard
70f71744fb Ipsilon: prepare config changes for staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 15:22:15 +02:00
Aurélien Bompard
31b058a884 Ipsilon: set the keytab paths in krb5.conf 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 12:17:00 +02:00
Aurélien Bompard
5a01ac3566 Ipsilon: deploy the Fedora-specific files from a git repo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 12:17:00 +02:00
Pierre-Yves Chibon
6dc4c7533c ipsilon: Set the /ui alias to the Fedora theme folder 
Turns out commenting out this alias did not help, so instead I'm
pointing it to the Fedora theme folder which should thus make
/ui/res valid.

Fingers crossed!

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-12 11:29:30 +02:00
Pierre-Yves Chibon
7f3379d854 ipsilon: Comment out the alias for /ui 
If I'm reading ipsilon's code correctly this should now be
handled by ipsilon itself.
If I'm mistaken, I'll revert and keep looking for the proper
fix

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-12 11:25:40 +02:00
Pierre-Yves Chibon
1eb1b731db ipsilon: set the full path to the theme directory 
Currently we let ipsilon's magic load the tempate and asset from
that variable and it looks like it's somehow not doing what we want
with the asset since we can't access the fedora-authn-logo and the
login.css of the Fedora theme.
So let's see if using the full path to the directory helps or not.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-12 09:44:55 +02:00