pam_policy : Ensure it's only executed on Debian 11+ systems
This commit is contained in:
parent
5c095dc862
commit
b234fdaea9
|
@ -1,8 +1,13 @@
|
|||
---
|
||||
#
|
||||
# -password [success=1 default=ignore] pam_unix.so obscure yescrypt
|
||||
# +password requisite pam_pwquality.so retry=3
|
||||
# +password [success=1 default=ignore] pam_unix.so obscure use_authtok try_first_pass yescrypt
|
||||
|
||||
# System compatibility check. yescrypt only works on Debian 11+
|
||||
# So we ensure that this role isn't executed on older systems
|
||||
- name: "System compatibility check"
|
||||
assert:
|
||||
that:
|
||||
- ansible_distribution == "Debian"
|
||||
- ansible_distribution_major_version is version_compare('11', '>=')
|
||||
msg: pam_policy is only compatible with Debian >= 11
|
||||
|
||||
|
||||
|
||||
|
|
Loading…
Reference in New Issue