- Apr 17, 2019
-
-
Thomas Woerner authored
The settings ipareplica_add_sids and ipareplica_add_agents are not used in the ipareplica role. Therefore they have been removed.
-
Thomas Woerner authored
In case of an RuntimeError, ValueError or ScriptError the fail_json call was done on module instead of ansible_module. module simply does not exist.
-
Thomas Woerner authored
Meta end_play has been used as a simple solution to end the playbook processing in special conditions, like for example when the deployment was already done before. meta end_play has been replaced with blocks and conditions for these blocks. Fixes: #70 (Avoid using meta end_play)
-
Thomas Woerner authored
The ansible_fqdn hostname has been enforced to be set and used in ipaserver, ipareplica and also ipaclient role. This has been removed as the hostname should only be set if specified explicitly with ipa[server,replica,client]_hostname.
-
Thomas Woerner authored
The FreeIPA versions since 4.7.0 are using chrony and also the new sync_time function for time synchronization which has been added to ipaclient/install/client.py. The old version in ipaclient_setup_ntp has been updated to the code that has been used in 4.6.4.
-
- Apr 16, 2019
-
-
Thomas Woerner authored
The installer logs have not been created using the ansible ipaclient, ipareplica and ipaserver roles. This has been fixed and the installer logs are created now. This is a new and fixed version of 2113c791 where verbose mode is turned off.
-
- Apr 05, 2019
-
-
Thomas Woerner authored
forward_policy is only set in dns.install_test in ipareplica_test if setup_dns is enabled. Therefore forward_policy will be ommited in this case.
-
Thomas Woerner authored
cli_servers from ipaclient_test was missing in ipaclient_setup_ntp. This resulted in a backtrace and is fixed now. Fix options.ntp_servers check to not use length on NoneType.
-
Thomas Woerner authored
This is needed in ipareplica_setup_ds and has been removed before as part of commit f33d234d.
-
Thomas Woerner authored
The call of standard_logging_setup results in verbose and debug output in the ansible modules. This needs to be done in an altenative way. This reverts commit 2113c791.
-
Thomas Woerner authored
The inspect binding is needed because of the inspection of validate_domain_name that has been introduced with commit 818db5cb for FreeIPA versions prior to 4.7.
-
- Apr 04, 2019
-
-
Thomas Woerner authored
check_ldap_conf is only available in FreeIPA 4.7 and later and tasks.is_nosssd_supported is only available since 4.6.90.pre2. check_ldap_conf is None (ansible_ipa_client) if it can not be imported. hasattr has been added to check if is_nosssd_supported is a valid attribute in tasks. Fixes: #61 (ipaserver role - Fails on ipaclient install)
-
Thomas Woerner authored
The entity argument for validate_domain_name is only available in FreeIPA 4.7 and later. This has been fixed using inspect to be able to detect if entity is a valid argument. If not the whole realm name check is skipped. Related: #61 (ipaserver role - Fails on ipaclient install) Fixes: #66 (Python 2 error with validate_domain)
-
Thomas Woerner authored
ipaserver_test was not handling possible exceptions in the tests which resulted in a traceback. This has been fixed.
-
- Apr 03, 2019
-
-
Thomas Woerner authored
This setting had the wrong and unsed prefix ipahost. THis has been fixed and the proper prefix ipaclient is now used. The change in ipaclient/defaults/main.yml was missing from the first commit b5d6dc00
-
Thomas Woerner authored
These test are failing because there is no adtrust_imported and kra_imported setting yet in ansible_ipa_replica.
-
Thomas Woerner authored
If replica_conn_check failed a back trace was printed instead of a proper failure in ansible. Thias has been fixed.
-
Thomas Woerner authored
The configuration of DNS failed because of missing DNS settings in the ipareplica_prepare and ipareplica_setup_dns. Some fixed settings for use with DNSInstallInterface have been added to ansible_ipa_replica: options.dnssec_master = False options.disable_dnssec_master = False options.kasp_db_file = None options.force = False Fixes: #58 (install-replica fails: reverse_zones seems to be empty) Fixes: #63 (ipareplica_setup_dns fails)
-
Thomas Woerner authored
Removed unused user_input import from ipapython.ipautil. Added import of DN from ipapython.dn. Set ntpinstance to None if timeconf or sync_time could not be imported on older FreeIPA releases.
-
Thomas Woerner authored
Use ipaserver_install_packages to enable or disable package installation for the client deployment part with ipaclient role.
-
Thomas Woerner authored
Use ipareplica_install_packages to enable or disable package installation for the client deployment part with ipaclient role.
-
Thomas Woerner authored
Replica config is not needed and there fore has been removed.
-
Thomas Woerner authored
The dns settings in options have not been used and also not provided to the module in the tasks file. Therefore these settings shoul dbe removed.
-
Thomas Woerner authored
The dns settings in options have not been used and also not provided to the module in the tasks file. Therefore these settings shoul dbe removed.
-
Thomas Woerner authored
The dns settings in options have not been used and also not provided to the module in the tasks file. Therefore these settings shoul dbe removed.
-
Thomas Woerner authored
ipaserver_master_password and ipaserver_setup_ntp have been linked from the ipaserver role before. With the move of the module_utils parts to the specific role locations the use of ipaserver modules leads to the missing dependency ansible_ipa_server, that is now only available in the server role. The ipaserver_master_password module has been replaced by the ipareplica specific ipareplica_master_password module. The ipaserver_setup_ntp module has been removed as the time related changes for replica are done in the client install part. Fixes: #59 (Module is missing interpreter line)
-
Thomas Woerner authored
The installer logs have not been created using the ansible ipaclient, ipareplica and ipaserver roles. This has been fixed and the installer logs are created now.
-
Thomas Woerner authored
This setting had the wrong and unsed prefix ipahost. THis has been fixed and the proper prefix ipaclient is now used.
-
Thomas Woerner authored
Krb5 configuration was also done if ipaclient_on_master was set. This resulted in a reverted configuration while deploying the client part in a server deploment.
-
- Mar 26, 2019
-
-
Thomas Woerner authored
The role test is executed in the ipa[server,replica,client] roles first. These tests are usable in the Ansible test mode, but the folllowing steps in the task list are not. Therefore the blocks following the tests are limited to not being executed in test mode.
-
Thomas Woerner authored
python_2_3_test needs to be executed also in test mode to make sure that the follwing ipa[server,replica,client]_test modules could be executed also in test mode.
-
Thomas Woerner authored
The changed flag is not set to True any more to make sure that the try to deploy an already deployed server again will not result in an error.
-
Thomas Woerner authored
Up to now the try to deploy an already deployed replica resulted in an error. Now this ends in an end play and no error is reported.
-
Thomas Woerner authored
For consitency the result_ prefix has been added to the registered result of the py3test.py script.
-
Thomas Woerner authored
With the changes for IPA enablement in the replica installer it is not possible anymore to enable the IPA server in the same way as in the server deployment. The new module ipareplica_enable_ipa has been added and the link for ipaserver_enable_ipa has been removed.
-
Thomas Woerner authored
The parameter config_setup_ca has been renamed to setup_ca and added to options. master_host_name has been added to config. Also a call for api.Backend.ldap2.connect has been added to make sure that the backend is connected.
-
Thomas Woerner authored
The promote argument has been dropped with the final removal of domain level 0 support in version 4.7.1. The fstore argument has been added with the 4.7.1 version also.
-
Thomas Woerner authored
The promote argument has been dropped with the final removal of domain level 0 support in version 4.7.1. The fstore argument has been added with the 4.7.1 version also.
-
Thomas Woerner authored
The promote argument has been dropped with the final removal of domain level 0 support in version 4.7.1. The fstore argument has been added with the 4.7.1 version also.
-
Thomas Woerner authored
Double imports and also the import of create_replica_config from ipaserver.install.installutils have been removed. create_replica_config is not used because the use of domain level 0 is not supported.
-