Amir Alexander Abdelbaki 6ad8d0d488 feat(ansipa): add no_local_users device policy to lock all local account passwords ... Adds a new host group policy `no_local_users` that locks the passwords of root and all local users (UID >= 1000) via `passwd -l`, ensuring only FreeIPA domain accounts with centrally-managed sudo rules can authenticate and gain elevated privileges. Leaving the group reverts by unlocking every account tracked in the state file. Updates docs with group reference entry and Local User Lockdown section. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-20 16:18:48 +02:00
..
ansible	feat(ansipa): add no_local_users device policy to lock all local account passwords	2026-05-20 16:18:48 +02:00
image	feat(ansipa): store LUKS backup keys on SMB share with KeyAdmin access control	2026-05-20 15:33:17 +02:00
auto-enroll-ansible.sh	Update setup/modules/FreeipaAnsible/auto-enroll-ansible.sh	2026-04-27 16:38:02 +02:00
copilot-explains.txt	Update setup/modules/FreeipaAnsible/copilot-explains.txt	2026-04-27 17:00:37 +02:00
freeipa-client-answerfile.json	setup: add FreeIPA server module and generic client script	2026-05-18 11:12:31 +02:00
freeipa-client.sh	setup: add FreeIPA server module and generic client script	2026-05-18 11:12:31 +02:00
freeipa-enroll.sh	Update setup/modules/FreeipaAnsible/freeipa-enroll.sh	2026-04-27 16:37:09 +02:00