You've already forked ansible-role-auth-duo
Set no_log for duo configuration (secret)
This commit is contained in:
@@ -14,6 +14,7 @@
|
|||||||
# fail:
|
# fail:
|
||||||
# msg: "ikey should not be 'someikey' see defaults/main.yml"
|
# msg: "ikey should not be 'someikey' see defaults/main.yml"
|
||||||
# when:
|
# when:
|
||||||
|
|
||||||
- name: Ensure Duo configuration in place
|
- name: Ensure Duo configuration in place
|
||||||
ini_file:
|
ini_file:
|
||||||
path: /etc/duo/pam_duo.conf
|
path: /etc/duo/pam_duo.conf
|
||||||
@@ -21,6 +22,7 @@
|
|||||||
option: "{{ item.key }}"
|
option: "{{ item.key }}"
|
||||||
value: "{{ item.value }}"
|
value: "{{ item.value }}"
|
||||||
with_items: "{{ auth_duo_settings }}"
|
with_items: "{{ auth_duo_settings }}"
|
||||||
|
no_log: true
|
||||||
|
|
||||||
- name: Ensure PAM for SSH is configured with duo MFA
|
- name: Ensure PAM for SSH is configured with duo MFA
|
||||||
copy:
|
copy:
|
||||||
|
|||||||
Reference in New Issue
Block a user