Add conditional FIPS Posture-Relaxation Handler

plus3it / join-domain-formula

Salt formula to join systems to an Active Directory domain

Apache License 2.0

13 stars 19 forks source link

Add conditional FIPS Posture-Relaxation Handler #219

Closed ferricoxide closed 2 months ago

ferricoxide commented 2 months ago

Per the Red Hat documentation, in order to support AD-based authentication via the realm service, RHEL 9's FIPS-posture must be relaxed by executing:

update-crypto-policies --set FIPS:AD-SUPPORT

This PR adds this logic as a prep-step prior to attempting to execute realm join … on RHEL 9 (and higher) ELx distros.

Closes #218