Modifications necessary to kerberize guacamole - Githubissues

cisagov / ansible-role-guacamole

An Ansible role for installing cisagov/guacamole-composition

Creative Commons Zero v1.0 Universal

4 stars 3 forks source link

Modifications necessary to kerberize guacamole #6

Closed jsf9k closed 4 years ago

jsf9k commented 4 years ago

🗣 Description

This pull request makes modifications necessary to kerberize guacamole. These include:

Adding tasks for configure httpd for PAM and Kerberos
Adding httpd configurations for regular users as well as administrative users
Changing the path to the SSL certificate files to reflect the use of httpd instead of nginx
Adding a script to set up the guacamole and guacamole-admin FreeIPA services

See also:

cisagov/guacamole-composition#9
cisagov/ansible-role-httpd#2
cisagov/cool-assessment-terraform#58

💭 Motivation and Context

Guacamole must be kerberized in the COOL.

🧪 Testing

I used these changes to successfully a kerberized version of guacamole to env0 in our staging environment.

🚥 Types of Changes

[ ] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[x] Breaking change (causes existing functionality to change)

✅ Checklist

[x] My code follows the code style of this project.
[x] My change requires a change to the documentation.
[x] I have updated the documentation accordingly.
[x] I have read the CONTRIBUTING document.
[x] I have added tests to cover my changes.
[x] All new and existing tests passed.