From b51980ee5d73091457653f61e6c88af799e5f610 Mon Sep 17 00:00:00 2001
From: Thomas Woerner <twoerner@redhat.com>
Date: Wed, 4 Oct 2017 17:29:44 +0200
Subject: [PATCH] roles/ipaclient/tasks/install.yml: New fails, no end_play
with ipajoin.changed
The new results from ipatest (krb5_conf_ok and ipa_test_ok) are now used for
additional fails to suggest to enable allow_repair.
The playbook is not ended anymore if ipajoin changed something.
---
roles/ipaclient/tasks/install.yml | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/roles/ipaclient/tasks/install.yml b/roles/ipaclient/tasks/install.yml
index 920d1cac..9ce1cf4b 100644
--- a/roles/ipaclient/tasks/install.yml
+++ b/roles/ipaclient/tasks/install.yml
@@ -114,8 +114,14 @@
file:
path: "/etc/ipa/.dns_ccache"
state: absent
+ - fail:
+ msg: "The krb5 configuration is not correct, please enable allow_repair to fix this."
+ when: not ipatest.krb5_conf_ok
+ - fail:
+ msg: "The IPA test failed, please enable allow_repair to fix this."
+ when: not ipatest.ipa_test_ok
- meta: end_play
- when: not ipaclient_allow_repair | bool and (ipatest.krb5_keytab_ok or ipajoin.already_joined)
+ when: not ipajoin.changed and not ipaclient_allow_repair | bool and (ipatest.krb5_keytab_ok or ipajoin.already_joined)
- name: Install - Configure IPA default.conf
include_role:
--
GitLab