60 lines
2.2 KiB
YAML
60 lines
2.2 KiB
YAML
---
|
|
# ---------------------------------------------------
|
|
# CRéation des groupes
|
|
# ---------------------------------------------------
|
|
- name: Création des groupes
|
|
ansible.builtin.group:
|
|
name: "{{ item.group }}"
|
|
gid: "{{ item.gid }}"
|
|
state: present
|
|
loop:
|
|
- { group: oinstall, gid: 1001}
|
|
- { group: dba, gid: 1002 }
|
|
- { group: oper, gid: 1003 }
|
|
- { group: backupdba, gid: 1004 }
|
|
- { group: dgdba, gid: 1005 }
|
|
- { group: kmdba, gid: 1006 }
|
|
- { group: racdba, gid: 1007 }
|
|
- { group: asmadmin, gid: 1008 }
|
|
- { group: asmdba, gid: 1009 }
|
|
- { group: asmoper, gid: 1010 }
|
|
ignore_errors: true
|
|
when: full_configuration |bool
|
|
tags: group
|
|
|
|
# ---------------------------------------------------
|
|
# Création des utilisateurs : password Oracle123 => full configuration
|
|
# ---------------------------------------------------
|
|
- name: Création du compte Oracle et grid
|
|
ansible.builtin.user:
|
|
name: "{{ item.username }}"
|
|
group: "{{ item.primgroup }}"
|
|
groups: "{{ item.othergroups }}"
|
|
uid: "{{ item.uid }}"
|
|
generate_ssh_key: yes
|
|
append: yes
|
|
state: present
|
|
update_password: on_create
|
|
password: "{{ item.passwd }}"
|
|
loop:
|
|
- { username: oracle, uid: 1001, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,racdba,oper", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0"}
|
|
- { username: grid, uid: 1002, primgroup: oinstall, othergroups: "dba,asmdba,backupdba,dgdba,kmdba,racdba,asmoper,asmadmin", passwd: "$6$0xHoAXXF$K75HKb64Hcb/CEcr3YEj2LGERi/U2moJgsCK.ztGxLsKoaXc4UBiNZPL0hlxB5ng6GL.gyipfQOOXplzcdgvD0"}
|
|
ignore_errors: true
|
|
when: full_configuration |bool
|
|
tags: user
|
|
|
|
|
|
# ---------------------------------------------------
|
|
# Ajout du compte oracle et grid au sudoers
|
|
# ---------------------------------------------------
|
|
- name: Ajout du compte oracle et grid au sudoers
|
|
ignore_errors: true
|
|
ansible.builtin.template:
|
|
src: sudoers.j2
|
|
dest: "/etc/sudoers.d/{{ item }}"
|
|
owner: root
|
|
mode: "0600"
|
|
loop:
|
|
- oracle
|
|
- grid
|
|
tags: sudoadd |