Draft: Introduced time based access invalidation to owner nodes

Done

• Time based access invalidation on owner nodes

To Do

• Time based access invalidation on analyst nodes

Notes

Merging into 52-use-freeipa-in-owner-node for now because changes from this branch are required.

Related to #59

roles/setup_node/templates/data-monitoring.cfg.j2

@@ -65,7 +65,7 @@ write_files:
       /usr/bin/hostnamectl set-hostname datamonitoring.{{ idm_domain }}
       /usr/bin/hostname
       ipa-client-install --server="{{ idm_server }}" --domain="{{ idm_domain }}" --no-ntp --principal="admin" \
-        --password="{{ idm_adm_passwd }}" --unattended --enable-dns-updates --mkhomedir
+        --password="{{ idm_adm_passwd }}" --unattended --enable-dns-updates --mkhomedir --no-krb5-offline-passwords
       echo '{{ idm_adm_passwd }}' | kinit admin
       ipa hostgroup-add-member datanodes --hosts=datamonitoring.{{ idm_domain }}