From c0a7ba202bd34a422d3812c4d11d9b32249b2ddd Mon Sep 17 00:00:00 2001
From: Nils Philippsen <nils@redhat.com>
Date: Mar 24 2021 12:44:33 +0000
Subject: ipa/client: enable for sundries in prod


Signed-off-by: Nils Philippsen <nils@redhat.com>

---

diff --git a/inventory/group_vars/sundries b/inventory/group_vars/sundries
index c92b5bc..30926e3 100644
--- a/inventory/group_vars/sundries
+++ b/inventory/group_vars/sundries
@@ -8,7 +8,6 @@ num_cpus: 2
 # the host_vars/$hostname file
 
 tcp_ports: [ 80, 873 ]
-fas_client_groups: sysadmin-noc,fi-apprentice,sysadmin-web,sysadmin-veteran,sysadmin-releng
 
 # This gets overridden by whichever node we want to run special cronjobs.
 master_sundries_node: False
@@ -21,8 +20,7 @@ rsync_group: sundries
 nrpe_procs_warn: 300
 nrpe_procs_crit: 500
 
-sudoers: "{{ private }}/files/sudo/sundries-sudoers"
-
+primary_auth_source: ipa
 ipa_host_group: sundries
 ipa_host_group_desc: Odds and ends
 ipa_client_shell_groups:
diff --git a/playbooks/groups/sundries.yml b/playbooks/groups/sundries.yml
index ba371e8..8679450 100644
--- a/playbooks/groups/sundries.yml
+++ b/playbooks/groups/sundries.yml
@@ -20,8 +20,7 @@
   - rkhunter
   - nagios_client
   - hosts
-  - { role: ipa/client, when: env == "staging" }
-  - { role: fas_client, when: env != "staging" }
+  - ipa/client
   - collectd/base
   - mod_wsgi
   - geoip
@@ -79,8 +78,6 @@
   - import_tasks: "{{ tasks_path }}/yumrepos.yml"
 
   tasks:
-  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
-    when: env != "staging"
   - import_tasks: "{{ tasks_path }}/motd.yml"
   - import_tasks: "{{ tasks_path }}/reg-server.yml"