Skip to content
Snippets Groups Projects
Commit 4bb1e845 authored by Florence Blanc-Renaud's avatar Florence Blanc-Renaud
Browse files

Fix modules documentation and remove unused variables

parent 63fd53eb
No related branches found
No related tags found
No related merge requests found
...@@ -33,9 +33,6 @@ short description: Create temporary NSS database, call IPA API for remaining enr ...@@ -33,9 +33,6 @@ short description: Create temporary NSS database, call IPA API for remaining enr
description: description:
Create temporary NSS database, call IPA API for remaining enrollment parts Create temporary NSS database, call IPA API for remaining enrollment parts
options: options:
servers:
description: The FQDN of the IPA servers to connect to.
required: false
realm: realm:
description: The Kerberos realm of an existing IPA deployment. description: The Kerberos realm of an existing IPA deployment.
required: true required: true
...@@ -45,6 +42,8 @@ options: ...@@ -45,6 +42,8 @@ options:
debug: debug:
description: Turn on extra debugging description: Turn on extra debugging
required: false required: false
type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
...@@ -141,8 +140,6 @@ def main(): ...@@ -141,8 +140,6 @@ def main():
servers = module.params.get('servers') servers = module.params.get('servers')
debug = module.params.get('debug') debug = module.params.get('debug')
fstore = sysrestore.FileStore(paths.IPA_CLIENT_SYSRESTORE)
statestore = sysrestore.StateFile(paths.IPA_CLIENT_SYSRESTORE)
host_principal = 'host/%s@%s' % (hostname, realm) host_principal = 'host/%s@%s' % (hostname, realm)
os.environ['KRB5CCNAME'] = paths.IPA_DNS_CCACHE os.environ['KRB5CCNAME'] = paths.IPA_DNS_CCACHE
...@@ -170,7 +167,6 @@ def main(): ...@@ -170,7 +167,6 @@ def main():
pass pass
# Add CA certs to a temporary NSS database # Add CA certs to a temporary NSS database
argspec = inspect.getargspec(tmp_db.create_db)
try: try:
if NUM_VERSION > 40404: if NUM_VERSION > 40404:
tmp_db.create_db() tmp_db.create_db()
......
...@@ -39,6 +39,7 @@ options: ...@@ -39,6 +39,7 @@ options:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: false required: false
type: list type: list
default: []
domain: domain:
description: The primary DNS domain of an existing IPA deployment. description: The primary DNS domain of an existing IPA deployment.
required: false required: false
...@@ -46,7 +47,7 @@ options: ...@@ -46,7 +47,7 @@ options:
description: The Kerberos realm of an existing IPA deployment. description: The Kerberos realm of an existing IPA deployment.
required: false required: false
hostname: hostname:
description: The authorized kerberos principal used to join the IPA realm. description: The hostname of the machine to join (FQDN).
required: false required: false
ca_cert_file: ca_cert_file:
description: A CA certificate to use. description: A CA certificate to use.
...@@ -55,6 +56,8 @@ options: ...@@ -55,6 +56,8 @@ options:
description: Check if IPA client is installed and matching. description: Check if IPA client is installed and matching.
required: false required: false
default: false default: false
type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
......
...@@ -37,42 +37,52 @@ Configure IPA extras ...@@ -37,42 +37,52 @@ Configure IPA extras
options: options:
servers: servers:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: false required: true
type: list
domain: domain:
description: The primary DNS domain of an existing IPA deployment. description: The primary DNS domain of an existing IPA deployment.
required: false required: true
ntp: ntp:
description: Set to no to not configure and enable NTP description: Set to no to not configure and enable NTP
required: false required: false
type: bool
default: no
force_ntpd: force_ntpd:
description: Stop and disable any time&date synchronization services besides ntpd. description: Stop and disable any time&date synchronization services besides ntpd.
required: false required: false
type: bool
default: no
ntp_servers: ntp_servers:
description: The ntp servers to configure if ntp is enabled. description: The ntp servers to configure if ntp is enabled.
required: false required: false
type: list
ssh: ssh:
description: Configure OpenSSH client description: Configure OpenSSH client
required: false required: false
type: bool
default: yes default: yes
sssd: sssd:
description: Configure the client to use SSSD for authentication description: Configure the client to use SSSD for authentication
required: false required: false
type: bool
default: yes default: yes
trust_sshfp: trust_sshfp:
description: Configure OpenSSH client to trust DNS SSHFP records description: Configure OpenSSH client to trust DNS SSHFP records
required: false required: false
type: bool
default: yes default: yes
sshd: sshd:
description: Configure OpenSSH server description: Configure OpenSSH server
required: false required: false
type: bool
default: yes default: yes
automount_location: automount_location:
description: Automount location description: Automount location
required: false required: false
default: no
firefox: firefox:
description: Configure Firefox to use IPA domain credentials description: Configure Firefox to use IPA domain credentials
required: false required: false
type: bool
default: no default: no
firefox_dir: firefox_dir:
description: Specify directory where Firefox is installed (for example: '/usr/lib/firefox') description: Specify directory where Firefox is installed (for example: '/usr/lib/firefox')
...@@ -80,11 +90,16 @@ options: ...@@ -80,11 +90,16 @@ options:
no_nisdomain: no_nisdomain:
description: Do not configure NIS domain name description: Do not configure NIS domain name
required: false required: false
type: bool
default: no default: no
nisdomain: nisdomain:
description: NIS domain name description: NIS domain name
required: false required: false
on_master: on_master:
description: Whether the configuration is done on the master or not.
required: false
type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
......
...@@ -28,14 +28,15 @@ ANSIBLE_METADATA = {'metadata_version': '1.0', ...@@ -28,14 +28,15 @@ ANSIBLE_METADATA = {'metadata_version': '1.0',
DOCUMENTATION = ''' DOCUMENTATION = '''
--- ---
module: ipaapi module: ipafixca
short description: Fix IPA ca certificate short description: Fix IPA ca certificate
description: description:
Repair Fix IPA ca certificate Repair Fix IPA ca certificate
options: options:
servers: servers:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: false required: true
type: list
realm: realm:
description: The Kerberos realm of an existing IPA deployment. description: The Kerberos realm of an existing IPA deployment.
required: true required: true
...@@ -43,9 +44,10 @@ options: ...@@ -43,9 +44,10 @@ options:
description: The basedn of the IPA server (of the form dc=example,dc=com). description: The basedn of the IPA server (of the form dc=example,dc=com).
required: true required: true
allow_repair: allow_repair:
deescription: Allow repair of already joined hosts. Contrary to ipaclient_force_join the host entry will not be changed on the server. description: Allow repair of already joined hosts. Contrary to ipaclient_force_join the host entry will not be changed on the server.
required: true required: true
type: boolean type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
......
...@@ -38,6 +38,7 @@ options: ...@@ -38,6 +38,7 @@ options:
servers: servers:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: true required: true
type: list
domain: domain:
description: The primary DNS domain of an existing IPA deployment. description: The primary DNS domain of an existing IPA deployment.
required: true required: true
...@@ -68,13 +69,18 @@ options: ...@@ -68,13 +69,18 @@ options:
force_join: force_join:
description: Force enrolling the host even if host entry exists. description: Force enrolling the host even if host entry exists.
required: false required: false
type: bool
default: no
kinit_attempts: kinit_attempts:
description: Repeat the request for host Kerberos ticket X times. description: Repeat the request for host Kerberos ticket X times.
required: false required: false
type: int
default: 5 default: 5
debug: debug:
description: Enable debug mode. description: Enable debug mode.
required: false required: false
type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
......
...@@ -38,6 +38,7 @@ options: ...@@ -38,6 +38,7 @@ options:
servers: servers:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: true required: true
type: list
domain: domain:
description: The primary DNS domain of an existing IPA deployment. description: The primary DNS domain of an existing IPA deployment.
required: true required: true
...@@ -57,14 +58,20 @@ options: ...@@ -57,14 +58,20 @@ options:
description: The subject base, needed for certmonger description: The subject base, needed for certmonger
required: true required: true
ca_enabled: ca_enabled:
description: Wheter the Certificate Authority is enabled or not. description: Whether the Certificate Authority is enabled or not.
required: true required: true
type: bool
default: no
mkhomedir: mkhomedir:
description: Whether to create home directories for users on their first login. description: Whether to create home directories for users on their first login.
required: false required: false
type: bool
default: no
on_master: on_master:
description: Whether the configuration is done on the maseter or not. description: Whether the configuration is done on the master or not.
required: false required: false
type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
...@@ -296,8 +303,6 @@ def main(): ...@@ -296,8 +303,6 @@ def main():
if nslcd.is_installed(): if nslcd.is_installed():
save_state(nslcd, statestore) save_state(nslcd, statestore)
retcode, conf = (0, None)
########################################################################## ##########################################################################
# Modify nsswitch/pam stack # Modify nsswitch/pam stack
......
...@@ -37,10 +37,11 @@ Configure sssd ...@@ -37,10 +37,11 @@ Configure sssd
options: options:
servers: servers:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: false required: true
type: list
domain: domain:
description: The primary DNS domain of an existing IPA deployment. description: The primary DNS domain of an existing IPA deployment.
required: false required: true
realm: realm:
description: The Kerberos realm of an existing IPA deployment. description: The Kerberos realm of an existing IPA deployment.
required: true required: true
...@@ -50,27 +51,42 @@ options: ...@@ -50,27 +51,42 @@ options:
services: services:
description: The services that should be enabled in the ssd configuration. description: The services that should be enabled in the ssd configuration.
required: true required: true
type: list
krb5_offline_passwords: krb5_offline_passwords:
description: Whether user passwords are stored when the server is offline. description: Whether user passwords are stored when the server is offline.
required: false required: false
type: bool
default: no
on_master: on_master:
description: Whether the configuration is done on the maseter or not. description: Whether the configuration is done on the master or not.
required: false required: false
type: bool
default: no
primary: primary:
description: Whether to use fixed server as primary IPA server. description: Whether to use fixed server as primary IPA server.
required: false required: false
type: bool
default: no
preserve_sssd: preserve_sssd:
description: Preserve old SSSD configuration if possible. description: Preserve old SSSD configuration if possible.
required: false required: false
type: bool
default: no
permit: permit:
description: Disable access rules by default, permit all access. description: Disable access rules by default, permit all access.
required: false required: false
type: bool
default: no
dns_updates: dns_updates:
description: Configures the machine to attempt dns updates when the ip address changes. description: Configures the machine to attempt dns updates when the ip address changes.
required: false required: false
type: bool
default: no
all_ip_addresses: all_ip_addresses:
description: All routable IP addresses configured on any interface will be added to DNS. description: All routable IP addresses configured on any interface will be added to DNS.
required: false required: false
type: bool
default: no
author: author:
- Thomas Woerner - Thomas Woerner
''' '''
......
...@@ -39,6 +39,7 @@ options: ...@@ -39,6 +39,7 @@ options:
servers: servers:
description: The FQDN of the IPA servers to connect to. description: The FQDN of the IPA servers to connect to.
required: true required: true
type: list
domain: domain:
description: The primary DNS domain of an existing IPA deployment. description: The primary DNS domain of an existing IPA deployment.
required: true required: true
...@@ -54,6 +55,7 @@ options: ...@@ -54,6 +55,7 @@ options:
kinit_attempts: kinit_attempts:
description: Repeat the request for host Kerberos ticket X times. description: Repeat the request for host Kerberos ticket X times.
required: false required: false
type: int
default: 5 default: 5
author: author:
- Thomas Woerner - Thomas Woerner
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment