ipa_sudorule; cmdgroup and runas functionality

[halberom]

SUMMARY

Extends ipa_sudorule module with

• cmdgroup param; This allows referencing a command group created with ipa_sudocmdgroup.
• runasuser param
• runasgroupofuser param
• runasgroup param

Fixes the changed logic for cmd to correctly report when the list changes.
Enhances the parameter descriptions with mutually exclusive details.

ISSUE TYPE

• Feature Pull Request

COMPONENT NAME

ipa_sudorule

ADDITIONAL INFORMATION

It's possible to add individual sudo cmds to a sudo rule, or a command group:

ipa sudorule-add-allow-command has 2 sub parameters, sudocmd and sudocmdgroup. This extends the module to add support for the second parameter, and makes the first more explicit.

See also https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/identity_management_guide/defining-sudorules

It's possible to specify whether a user may sudo as another user, or group - using runasuser (either entered individually or via groups) or and runasgroup.

[ansibot]

cc @Akasurde @Nosmoht @fxfitz
click here for bot help

[ansibot]

The test ansible-test sanity --test pep8 [explain] failed with 1 error:

lib/ansible/modules/identity/ipa/ipa_sudorule.py:266:1: E302: expected 2 blank lines, found 1

click here for bot help

[ansibot]

Thank you very much for your interest in Ansible. Ansible has migrated much of the content into separate repositories to allow for more rapid, independent development. We are closing this issue/PR because this content has been moved to one or more collection repositories.

• lib/ansible/modules/identity/ipa/ipa_sudorule.py -> https://galaxy.ansible.com/community/general

For further information, please see:
https://github.com/ansible/ansibullbot/blob/master/docs/collection_migration.md