Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
  • v1.14.7
  • v1.14.6
  • v1.14.5
  • v1.14.4
  • v1.14.3
  • v1.14.2
  • v1.14.1
  • v1.14.0
  • v1.13.2
  • v1.13.1
  • v1.13.0
  • v1.12.1
  • v1.12.0
  • v1.11.1
  • v1.11.0
  • v1.10.0
  • v1.9.2
  • v1.9.1
  • v1.9.0
  • v1.8.4
21 results

README.md

Blame
    • Thomas Woerner's avatar
      624e0d34
      ipaclient: No kinit on controller for deployment using OTP · 624e0d34
      Thomas Woerner authored
      The generation of the OTP for client deployment is now completely
      happening on the first of the given or detected servers with delegate_to.
      The module ipaclient_get_otp has been replaced by a new module using code
      from ipahost module and module_utils ansible_freeipa_module.
      
      The action plugin ipaclient_get_otp has been removed and with this also
      ipaclient_get_facts.
      
      If an admin keytab is used instead of an admin password, it is copied to
      the server as a temporary file to enable the OTP generation. The temporary
      file is removed again after using the ipaclient_get_otp module.
      
      The utils script build-galaxy-release.sh has been updated to not copy the
      ipaclient action plugin to the global plugins folder of the collection.
      
      This change is import for the use of the ipaclient role with AAP as only
      the base environment is sufficient now.
      
      The ipaclient README and also the global README have been updated as
      kinit is not needed anymore on the controller for OTP.
      
      Fixes #903 (Allow the use of principals other than admin when using
                  ipaadmin_keytab)
      624e0d34
      History
      ipaclient: No kinit on controller for deployment using OTP
      Thomas Woerner authored
      The generation of the OTP for client deployment is now completely
      happening on the first of the given or detected servers with delegate_to.
      The module ipaclient_get_otp has been replaced by a new module using code
      from ipahost module and module_utils ansible_freeipa_module.
      
      The action plugin ipaclient_get_otp has been removed and with this also
      ipaclient_get_facts.
      
      If an admin keytab is used instead of an admin password, it is copied to
      the server as a temporary file to enable the OTP generation. The temporary
      file is removed again after using the ipaclient_get_otp module.
      
      The utils script build-galaxy-release.sh has been updated to not copy the
      ipaclient action plugin to the global plugins folder of the collection.
      
      This change is import for the use of the ipaclient role with AAP as only
      the base environment is sufficient now.
      
      The ipaclient README and also the global README have been updated as
      kinit is not needed anymore on the controller for OTP.
      
      Fixes #903 (Allow the use of principals other than admin when using
                  ipaadmin_keytab)