add configuration variables for pam_limits

Author: bartowl

changelogs/fragments/pam_limits_config.yml

@@ -0,0 +1,2 @@
+minor_changes:
+  - add configuration variables for pam_limits to orahost (oravirt#316)

roles/orahost/defaults/main.yml

@@ -119,6 +119,9 @@ configure_ssh: false                        # (true/false). Should passwordless
 # mountpoints are described in host_fs_layout
 configure_host_disks: false
 
+configure_limits_pam: true  # entry in /etc/pam.d/limits
+configure_limits: true      # /etc/security.d/limits.d/99-oracle-limits.conf file
+
 configure_etc_hosts: false
 configure_cluster: false
 oracle_stage: /u01/stage

roles/orahost/tasks/main.yml

@@ -463,6 +463,7 @@
     state: present
     line: "session required pam_limits.so"
   tags: pamconfig
+  when: configure_limits_pam and configure_limits
 
 - name: Oracle-recommended security limits
   ansible.builtin.template:
@@ -472,6 +473,7 @@
     mode: "0644"
   when: ansible_os_family == 'RedHat'
   tags: seclimit
+  when: configure_limits
 
 - name: Oracle-recommended security limits on SLES
   community.general.system.pam_limits: