# centralised authentication of linux servers and integrates with google work space

**URL:** <https://forum.ansible.com/t/centralised-authentication-of-linux-servers-and-integrates-with-google-work-space/34949>\
**Category:** Ansible Project\
**Created:** [April 9, 2021, 8:20am UTC](https://forum.ansible.com/t/centralised-authentication-of-linux-servers-and-integrates-with-google-work-space/34949 "2021-04-09T08:20:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Siva1](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@Siva1](https://forum.ansible.com/u/Siva1)\
**Post date:** [April 9, 2021, 8:20am UTC](https://forum.ansible.com/t/centralised-authentication-of-linux-servers-and-integrates-with-google-work-space/34949/1 "2021-04-09T08:20:05Z")

</div>

Hi All ,

Goodmorning .I am new to ansible and also to devops  
My organisation wanted me to do centralised authentication of linux servers ,Vm 's ,vcenter for any employee joins the organisation and they want to integrate the same on the google workspace

Any inputs on this will be a great help for me to start with

Thanks in advance

---

<div class="post-metadata">

**Author:** ![Michael\_Stroder](https://avatars.discourse-cdn.com/v4/letter/m/7ea924/32.png) [@Michael\_Stroder](https://forum.ansible.com/u/Michael_Stroder)\
**Post date:** [April 9, 2021, 9:37am UTC](https://forum.ansible.com/t/centralised-authentication-of-linux-servers-and-integrates-with-google-work-space/34949/2 "2021-04-09T09:37:49Z")

</div>

Some people will recommend to simply use modules user [1] and group [2]  
to add user accounts to all your systems.

While I like automation via ansible this approach has deficiencies, e.g.  
you have to provide unique UID and GID values in the inventory and thus  
you need a database which enforces this uniqueness.

Off-topic:

Some people will recommend FreeIPA and there are some IPA-specific  
ansible modules.

But I needed delegated administration and strict need-to-know  
priniciple. Thus I've developed my own solution Æ-DIR (see  
[https://ae-dir.com/](https://ae-dir.com/)) which is based on OpenLDAP and has some more  
components you need. Being the author I'm biased of course.

On-topic again: Æ-DIR is installed with ansible [3]. 🙂

Ciao, Michael.

[1]  
[https://docs.ansible.com/ansible/latest/collections/ansible/builtin/user\_module.html](https://docs.ansible.com/ansible/latest/collections/ansible/builtin/user_module.html)

[2]  
[https://docs.ansible.com/ansible/latest/collections/ansible/builtin/group\_module.html](https://docs.ansible.com/ansible/latest/collections/ansible/builtin/group_module.html)

[3] [https://www.ae-dir.com/install.html](https://www.ae-dir.com/install.html)

---

<div class="post-metadata">

**Author:** ![Siva1](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@Siva1](https://forum.ansible.com/u/Siva1)\
**Post date:** [April 9, 2021, 10:25am UTC](https://forum.ansible.com/t/centralised-authentication-of-linux-servers-and-integrates-with-google-work-space/34949/3 "2021-04-09T10:25:06Z")

</div>

Thanks alot Michael ,Can we integrate with google workspace using open ldap and the thing to be noted is they don’t want to spend money  
Sorry to trouble you bys asking more

Best Regards,  
Sivapriya

---

<div class="post-metadata">

**Author:** ![Michael\_Stroder](https://avatars.discourse-cdn.com/v4/letter/m/7ea924/32.png) [@Michael\_Stroder](https://forum.ansible.com/u/Michael_Stroder)\
**Post date:** [April 9, 2021, 10:41am UTC](https://forum.ansible.com/t/centralised-authentication-of-linux-servers-and-integrates-with-google-work-space/34949/4 "2021-04-09T10:41:20Z")

</div>

> Can we integrate with google workspace using open ldap  
> and the thing to be noted is they don't want to spend money  
> Sorry to trouble you bys asking more

All the stuff I've mentioned is free software.

I don't know whether integration with google workspace works. FreeIPA  
and Æ-DIR both expose LDAP end-points to use with data suitable to be  
used for NSS/PAM in Linux.

But this stuff is getting highly off-topic here.

Ciao, Michael.