diff --git a/.README.html b/.README.html index 08b2432..b1be096 100644 --- a/.README.html +++ b/.README.html @@ -203,8 +203,12 @@

Contents

id="toc-ad_dyndns_server">ad_dyndns_server
  • ad_integration_join_parameters
    • +
  • ad_integration_sssd_settings
  • ad_integration_sssd_custom_settings
    • +
  • ad_integration_preserve_authselect_profile
  • Example @@ -462,30 +466,45 @@

    ad_dyndns_server

    for details. Example: ad_integration_join_parameters: "--user-principal host/    client007@EXAMPLE.COM"

    +

    ad_integration_sssd_settings

    +

    A list of setting to be included into the [sssd] section +of the sssd.conf file. See sssd.conf man pages for details. Example:

    +
    ad_integration_sssd_settings:
+  - key: "configuration_name"
+    value: "configuration_value"

    ad_integration_sssd_custom_settings

    A list of custom setting to be included into the [domain/$REALM] section of the sssd.conf file. See sssd.conf man pages for details. Example:

    -
    ad_integration_sssd_custom_settings:
-  - key: "configuration_name"
-    value: "configuration_value"
    +
    ad_integration_sssd_custom_settings:
+  - key: "configuration_name"
+    value: "configuration_value"
    +

    ad_integration_preserve_authselect_profile

    +

    This is a boolean, default is false. If +true, configure realmd.conf to remove the +authselect command from sssd-enable-logins to +avoid overwriting previous PAM/nsswitch changes, until RHEL-5101 is +addressed.

    Example Playbook

    The following is an example playbook to setup direct Active Directory integration with AD domain domain.example.com, the join will be performed with user Administrator using the vault stored password. Prior to the join, the crypto policy for AD SUPPORT with RC4 encryption allowed will be set.

    -
    - hosts: all
-  vars:
-    ad_integration_realm: "domain.example.com"
-    ad_integration_password: !vault | …vault encrypted password…
-    ad_integration_manage_crypto_policies: true
-    ad_integration_allow_rc4_crypto: true
-  roles:
-    - linux-system-roles.ad_integration
    +
    - hosts: all
+  vars:
+    ad_integration_realm: "domain.example.com"
+    ad_integration_password: !vault | …vault encrypted password…
+    ad_integration_manage_crypto_policies: true
+    ad_integration_allow_rc4_crypto: true
+  roles:
+    - linux-system-roles.ad_integration

    rpm-ostree

    See README-ostree.md

    License

    diff --git a/CHANGELOG.md b/CHANGELOG.md index 0e3b367..622bd51 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,19 @@ Changelog ========= +[1.4.0] - 2024-01-16 +-------------------- + +### New Features + +- feat: Add SSSD parameters support (#76) +- feat: add ad_integration_preserve_authselect_profile (#79) + +### Other Changes + +- ci: fix ansible-lint 2.16 and ansible-test 2.16 issues (#74) +- ci: Use supported ansible-lint action; run ansible-lint against the collection (#77) + [1.3.1] - 2023-12-08 --------------------