krb.yml

---

- name: Enable GSSAPIAuthentication=yes
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?GSSAPIAuthentication"
    line: "GSSAPIAuthentication yes"

- name: Enable GSSAPIKeyExchange=yes
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?GSSAPIKeyExchange"
    line: "GSSAPIKeyExchange yes"

- name: Enable GSSAPICleanupCredentials=no
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?GSSAPICleanupCredentials"
    line: "GSSAPICleanupCredentials no"

- name: Enable GSSAPIStrictAcceptorCheck=no
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?GSSAPIStrictAcceptorCheck"
    line: "GSSAPIStrictAcceptorCheck no"

- name: Enable KerberosAuthentication
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?KerberosAuthentication"
    line: "KerberosAuthentication yes"

- name: Enable KerberosOrLocalPasswd
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?KerberosOrLocalPasswd"
    line: "KerberosOrLocalPasswd yes"

- name: Enable KerberosTicketCleanup
  lineinfile:
    dest: /etc/ssh/sshd_config
    regexp: "^#?KerberosTicketCleanup"
    line: "KerberosTicketCleanup yes"

- name: Update k5login
  lineinfile:
    dest: /root/.k5login
    regexp: "^{{ item }}.root"
    line: "{{ item }}/root@STACKEN.KTH.SE"
    create: yes
  loop:
    - nsg
    - fabian
    - kaj

- name: Deploy krb-bootstrap script
  copy:
    src: files/krb-bootstrap
    dest: /usr/local/bin/krb-bootstrap
    mode: 0755