mirror of
https://github.com/cliffe/SecGen.git
synced 2026-02-21 11:18:06 +00:00
Add Active Directory integration packages
- Introduced `ad_packages` module for installing necessary packages for Active Directory domain integration, including `realm`, `sssd`, `adcli`, and Samba utilities. - Created metadata file for the `ad_packages` module to describe its functionality and licensing. - Updated scenario configuration to include the new `ad_packages` utility.
This commit is contained in:
@@ -0,0 +1 @@
|
||||
include ad_packages::install
|
||||
@@ -0,0 +1,25 @@
|
||||
class ad_packages::install {
|
||||
# Active Directory Integration - Realm Management
|
||||
# Manages enrollment and integration with realms (Active Directory domains)
|
||||
ensure_packages(['realm'])
|
||||
|
||||
# System Security Services Daemon
|
||||
# Provides access to identity and authentication remote resource providers
|
||||
ensure_packages(['sssd', 'sssd-tools'])
|
||||
|
||||
# NSS and PAM SSSD Integration
|
||||
# Enables system authentication and name service lookups via SSSD
|
||||
ensure_packages(['libnss-sss', 'libpam-sss'])
|
||||
|
||||
# Active Directory CLI
|
||||
# Command-line tool for performing actions on an Active Directory domain
|
||||
ensure_packages(['adcli'])
|
||||
|
||||
# Samba Common Utilities
|
||||
# Common tools for interacting with Windows/Active Directory
|
||||
ensure_packages(['samba-common-bin'])
|
||||
|
||||
# OddJob - On-demand D-Bus System
|
||||
# Provides on-demand services, including home directory creation
|
||||
ensure_packages(['oddjob', 'oddjob-mkhomedir'])
|
||||
}
|
||||
@@ -0,0 +1,14 @@
|
||||
<?xml version="1.0"?>
|
||||
|
||||
<utility xmlns="http://www.github/cliffe/SecGen/utility"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://www.github/cliffe/SecGen/utility">
|
||||
<name>Active Directory Integration Packages</name>
|
||||
<author>Z. Cliffe Schreuders</author>
|
||||
<module_license>Apache v2</module_license>
|
||||
<description>Installs packages for Active Directory domain integration including realm, SSSD, and Samba utilities</description>
|
||||
|
||||
<type>authentication_configuration</type>
|
||||
<platform>linux</platform>
|
||||
|
||||
</utility>
|
||||
@@ -70,6 +70,8 @@
|
||||
<utility module_path=".*/hash_tools"/>
|
||||
<utility module_path=".*/pam_modules"/>
|
||||
<utility module_path=".*/ldap_packages"/>
|
||||
<utility module_path=".*/ad_packages"/>
|
||||
|
||||
|
||||
<utility module_path=".*/iceweasel">
|
||||
<input into="accounts">
|
||||
@@ -104,7 +106,7 @@
|
||||
</system>
|
||||
|
||||
<system>
|
||||
<system_name>server</system_name>
|
||||
<system_name>servr</system_name>
|
||||
<base distro="Debian 12" type="desktop" name="KDE"/>
|
||||
|
||||
<!--Create the users-->
|
||||
@@ -175,6 +177,7 @@
|
||||
<utility module_path=".*/hash_tools"/>
|
||||
<utility module_path=".*/pam_modules"/>
|
||||
<utility module_path=".*/ldap_packages"/>
|
||||
<utility module_path=".*/ad_packages"/>
|
||||
|
||||
<utility module_path=".*/iceweasel">
|
||||
<input into="accounts">
|
||||
@@ -208,7 +211,7 @@
|
||||
</system>
|
||||
|
||||
<system>
|
||||
<system_name>auth_server</system_name>
|
||||
<system_name>auth_servr</system_name>
|
||||
<base distro="Debian 12" type="desktop" name="KDE"/>
|
||||
|
||||
<!--Create the users-->
|
||||
@@ -233,6 +236,18 @@
|
||||
</input>
|
||||
</utility>
|
||||
|
||||
<utility module_path=".*/iceweasel">
|
||||
<input into="accounts">
|
||||
<datastore>user_accounts</datastore>
|
||||
</input>
|
||||
<input into="autostart">
|
||||
<value>true</value>
|
||||
</input>
|
||||
<input into="start_page">
|
||||
<value>http://localhost/phpldapadmin</value>
|
||||
</input>
|
||||
</utility>
|
||||
|
||||
<vulnerability module_path=".*/ssh_root_login">
|
||||
<input into="root_password">
|
||||
<datastore>spoiler_admin_pass</datastore>
|
||||
|
||||
Reference in New Issue
Block a user