From 3981dafd7bd29dad45c9872d4eca3f5467947b3f Mon Sep 17 00:00:00 2001
From: Rafael Guterres Jeffman <rjeffman@redhat.com>
Date: Mon, 1 Jun 2020 16:07:37 -0300
Subject: [PATCH] Allow clearing auth_ind by using "" as input value.

---
 plugins/modules/ipaservice.py  |  2 +-
 tests/service/test_service.yml | 20 ++++++++++++++++++++
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/plugins/modules/ipaservice.py b/plugins/modules/ipaservice.py
index 34ba7db7..157aee37 100644
--- a/plugins/modules/ipaservice.py
+++ b/plugins/modules/ipaservice.py
@@ -327,7 +327,7 @@ def init_ansible_module():
                           choices=["MS-PAC", "PAD", "NONE"]),
             auth_ind=dict(type="list",
                           aliases=["krbprincipalauthind"],
-                          choices=["otp", "radius", "pkinit", "hardened"]),
+                          choices=["otp", "radius", "pkinit", "hardened", ""]),
             skip_host_check=dict(type="bool"),
             force=dict(type="bool"),
             requires_pre_auth=dict(
diff --git a/tests/service/test_service.yml b/tests/service/test_service.yml
index 3c518055..a1216aa8 100644
--- a/tests/service/test_service.yml
+++ b/tests/service/test_service.yml
@@ -495,6 +495,26 @@
     register: result
     failed_when: result.changed
 
+  - name: Clear auth_ind.
+    ipaservice:
+      ipaadmin_password: SomeADMINpassword
+      name: "HTTP/{{ svc_fqdn }}"
+      auth_ind: ""
+      skip_host_check: no
+      force: yes
+    register: result
+    failed_when: not result.changed
+
+  - name: Clear auth_ind, again.
+    ipaservice:
+      ipaadmin_password: SomeADMINpassword
+      name: "HTTP/{{ svc_fqdn }}"
+      auth_ind: ""
+      skip_host_check: no
+      force: yes
+    register: result
+    failed_when: result.changed
+
   # cleanup
 
   - name: Ensure services are absent.
-- 
GitLab