- Jul 17, 2019
-
-
Thomas Woerner authored
These two varibles in the dns binding are initialized in the installation check in the install_check parts of ipareplica_prepare and used later on in the dns configuration in ipareplica_setup_dns.
-
Thomas Woerner authored
There is a new setting for the ipareplica role: ipareplica_pki_config_override
-
Thomas Woerner authored
The description of ipaclient_on_master in the ipaclient README was providing the information that the flag is also used for relicas. This is not correct and has been removed.
-
Thomas Woerner authored
dnsok has been used unitialized in the compatilbility code without sssd.
-
Thomas Woerner authored
All module and module_utils scripts have been adapted to be able to only import the symbols that are really needed and used.
-
Thomas Woerner authored
-
Thomas Woerner authored
-
Thomas Woerner authored
-
Thomas Woerner authored
Fixed wrong path to CheckedIPAddress class
-
- Jul 16, 2019
-
-
Andrey Shevchenko authored
-
Thomas Woerner authored
-
- Jul 11, 2019
-
-
Thomas Woerner authored
-
Thomas Woerner authored
If members are added to or removed from a not existing group, an error is printed.
-
Thomas Woerner authored
-
Thomas Woerner authored
When OTP is used for installation of a client or the client part of a replica and also there is no DNS record for the client, then ipaclient_get_otp fails in the host_add call. With the force mode the host_add call will ignore the missing DNS record and will properly add the host. The host information and also the DNS record will be updated while deploying the client according to the given settings. Fixes: #74 (ipaclient fails when ipaclient_use_otp is true and client ..)
-
Thomas Woerner authored
Since 4.7.1 it is needed to use CustodiaModes.FIRST_MASTER instead of CustodiaModes.MASTER_PEER for the get_custodia_instance. This has been fixed already in ipaserver_setup_ca and also ipaserver_setup_custodia, but was missed in ipaserver_setup_kra. Fixes: #92 (KRA install fails in tasks: [ipaserver : Install - Setup KRA])
-
- Jul 09, 2019
-
-
Thomas Woerner authored
-
Thomas Woerner authored
-
Thomas Woerner authored
ansible-lint does not like to have tasks without names. The comments have been adapted and transformed into name tags.
-
Thomas Woerner authored
ansible-lint does not like to have tasks without names. The comments have been adapted and transformed into name tags.
-
Thomas Woerner authored
-
Thomas Woerner authored
-
Thomas Woerner authored
There is a new group management module placed in the plugins folder: plugins/modules/ipagroup.py The group module allows to add, remove, enable, disable, unlock und undelete groups. The group module is as compatible as possible to the Ansible upstream `ipa_group` module, but addtionally offers to add users to a group and also to remove users from a group. Here is the documentation for the module: README-group.md New example playbooks have been added: playbooks/user/add-groups-to-group.yml playbooks/user/add-user-to-group.yml playbooks/user/add-group.yml playbooks/user/delete-group.yml
-
Thomas Woerner authored
There is a new user management module placed in the plugins folder: plugins/modules/ipauser.py The user module allows to add, remove, enable, disable, unlock und undelete users. The user module is as compatible as possible to the Ansible upstream `ipa_user` module, but addtionally offers to preserve delete, enable, disable, unlock and undelete users. Here is the documentation for the module: README-user.md New example playbooks have been added: playbooks/user/add-user.yml playbooks/user/delete-user.yml playbooks/user/enable-user.yml playbooks/user/disable-user.yml playbooks/user/delete-preserve--user.yml playbooks/user/undelete-user.yml
-
Thomas Woerner authored
date_format parses the supported date formats and creates a datetime object. compare_args_ipa compares generated args with args returned by IPA command find_ functions.
-
- Jul 05, 2019
-
-
Thomas Woerner authored
sync_time is not using options anymore, but has two new arguments. These are ntp_servers and ntp_pool. The options argument is not used anymore. This requires to use inspect on sync_time to be able to detect if the old or the new function is available. The call for get_time_source has been added, but is documented out as the call is only useful in interactive mode. ipaserver_test now returns ntp_servers and ntp_pool, which are then used for ipaserver_setup_ntp.
-
Thomas Woerner authored
sync_time is not using options anymore, but has two new arguments. These are ntp_servers and ntp_pool. The options argument is not used anymore. This requires to use inspect on sync_time to be able to detect if the old or the new function is available. The call for get_time_source has been added, but is documented out as the call is only useful in interactive mode. ipaclient_test now returns ntp_servers and ntp_pool, which are then used for ipaclient_setup_ntp.
-
Thomas Woerner authored
If kinit_password call failed because of wrong password or even because kinit was not found, there was a very unspecific error message. Now these errors will be properly reported. Fixes: RHBZ#1727277
-
Thomas Woerner authored
Add Information about needed /usr/bin/kinit on the controller when OTP is used
-
Thomas Woerner authored
Add Information about needed /usr/bin/kinit on the controller when OTP is used
-
- Jul 02, 2019
-
-
Thomas Woerner authored
The raises of RuntimeError, ValueError and ScriptError are currently not properly handled in ipaserver_prepare. This results in a trace back error shown in Ansible instead of only showing the error message. This happened for example if a nameserver is in /etc/resolv.conf that is not reachable.
-
- Jul 01, 2019
-
-
Thomas Woerner authored
The use of password will conflict with the user password setting and is not really descriptive. ipaadmin_principal and ipaadmin_password are also used in the roles.
-
- Jun 27, 2019
-
-
Thomas Woerner authored
There are currently only external signed CA tests: external-signed-ca-with-automatic-copy external-signed-ca-with-manual-copy
-
Thomas Woerner authored
-
Thomas Woerner authored
This adds support for the --external-ca option to ipaserver. Lots of additional tests and checks from ServerInstallInterface.__init__ have been added to ipaserver_test. Also duplicate tests cna checks have been removed. Installer settings in ansible_ipa_server module_util are now also set to the defaults that are used in Installable, ServerInstallInterface, ServerMasterInstall, ADTrustInstallInterface and Uninstall. The /root/ipa.csr file generated on the node in ca.install_step_0 will be copied to the controller as "{{ inventory_hostname }}-ipa.csr". The new task file copy_external_cert.yml has been added to copy the generated certificate defined in ipaserver_external_cert_files to the node to continue with ca.install_step_1. The tasks/install.yml file has been adapted to make sure that the steps that will be done in step two will be skipped after step one has been done.
-
- Jun 26, 2019
-
-
Thomas Woerner authored
This is not needed and will calm down ansible-lint, which is not able to handle the extra tasks folder prefix.
-
Thomas Woerner authored
These vars files are providing the module names used with the Ansible package module to install the needed RPM packages.
-
- Jun 25, 2019
-
-
Thomas Woerner authored
The general setting of installer.add_sids was not correct and has been fixed.
-
Thomas Woerner authored
These two settings are not set using the krb.init_info method, but used in krb.enable_ssl. The configuration of PKINIT fails in IPA 4.7.0 because of the issue https://pagure.io/freeipa/issue/7655 where auto detection of the master is not properly working. With the missing setting of krb.master_fqdn the not workint auto detection has been triggered, which resulted in failed PKINIT enablement.
-