Re: [ansible-project] How to control access with sudo and FreeIPA

2017-02-10 Thread Brian Coca
My favorites are cron, at and incron combined with unix ACLs and groups to restrict the different keys to each environment. But any job scheduler should work, you just need to make sure it meets your requirements, Tower just happens to pay my salary. -- Brian Coca -- You received this

Re: [ansible-project] How to control access with sudo and FreeIPA

2017-02-10 Thread Johannes Kastl
On 10.02.17 04:33 Brian Coca wrote: > Ansible itself does not have this built in, though there are many > ways to enforce this using other tools to execute it. Out of interest, which are those? Johannes -- You received this message because you are subscribed to the Google Groups "Ansible

Re: [ansible-project] How to control access with sudo and FreeIPA

2017-02-09 Thread Brian Coca
This is one of the things that the Ansible Tower server provides, full RBAC while using a shared user. Ansible itself does not have this built in, though there are many ways to enforce this using other tools to execute it. -- Brian Coca -- You received this message because you are

[ansible-project] How to control access with sudo and FreeIPA

2017-01-23 Thread Rodrigo B Brasil
Hello all! I'm trying to establish some access control when non-administrative user were running playbooks with Ansible. All the sudo rules are inherited from FreeIPA and now my only option is to create a sudo rule that enables **ALL** commands to an specific user to run some playbook on some