Skip to content
  1. Mar 26, 2019
  2. Mar 25, 2019
    • Thomas Woerner's avatar
      ipaclient_get_otp: Fix password encoding · fdb44fc2
      Thomas Woerner authored
      Deploying a client with one-time password use was failing in latest tests
      using ansible 2.7 and FreeIPA 4.7 because of an encoding problem.
      fdb44fc2
    • Thomas Woerner's avatar
      ipaclient: End install if already installed and no allow_repair and force_join · a6ee0d07
      Thomas Woerner authored
      If the client is already installed and the allow_repair and force_join
      options are not set end the playbook processing. This is useful if an
      inventory file contains existing and new machines.
      a6ee0d07
    • Thomas Woerner's avatar
      New ipaclient_setup_krb5: Use ipaclient_setup_krb5 instead of ipa-krb5 role · 099317fe
      Thomas Woerner authored
      The advantage of this is that the krb5 configuration is created in the same
      way as in the normal installers. The same functionality as in the normal
      installers is used in ipaclient_setup_krb5. There is no need to adapt the
      ipa-krb5 role or the the ask file for changes in how the krb5 configuration
      is done. Additionally ipaclient_force is now a supported parameter as
      it is in the normal installer.
      
      New config option:
      
      ipaclient_force
      
      The variable has been added to ipaclient/defaults/main.yml.
      099317fe
    • Thomas Woerner's avatar
      New ipaclient_ipa_conf: Use ipaclient_ipa_conf instead of ipaconf role · b9426617
      Thomas Woerner authored
      The advantage of this is that the ipa default configuration is created in
      the same way as in the normal installers. The same functionality as in the
      normal installers is used in ipaclient_ipa_conf.
      b9426617
    • Thomas Woerner's avatar
      ipaclient_setup_ssh: Keep no_ for prefix for settings, use ssh_trust_dns · d0ba5315
      Thomas Woerner authored
      The no_ prefix for the ssh and sshd settings has been added back. The
      naming of the settings should be the same all over the ipcalient role.
      The exception is sssd here as it has been deprected and is used from
      ipaclient_test.
      
      The name for the setting ssh_trust_dns has been fixed to the command line
      option name and not the internl optinos name.
      d0ba5315
    • Thomas Woerner's avatar
      ipaclient_setup_sssd: Update and cleanup · 2983d4e7
      Thomas Woerner authored
      ipaclient_setup_sssd is now using configure_sssd_conf from
      ipaclient/install/client.py instead. This simplified the module a lot
      and also adds more configuratino options for sssd.
      
      These are new config options supported by ipaclient_setup_sssd:
      
      ipaclient_no_sudo
      ipassd_fixed_primary
      ipassd_permit
      ipassd_enable_dns_updates
      ipassd_no_krb5_offline_passwords
      ipassd_preserve_sssd
      
      These variables have been added to ipaclient/defaults/main.yml.
      2983d4e7
    • Thomas Woerner's avatar
      ipaclient_test: More tests from ipaclient installer, updated ansible_ipa_client · c5ce7548
      Thomas Woerner authored
      The ipaclient_test module was not doing all tests that should be done
      with the provided settings. All tests from ipaclient installer parts
      are now part of ipaclient_test. There are some minor changes though to
      make sure that the repair mode could still be used.
      
      ansible_ipa_client bindings have been updated to fullfill new needs.
      c5ce7548
    • Thomas Woerner's avatar
      ipaclient/library/ipaclient_setup_ntp: Fix import of ansible_ipa_client · bf1f8bff
      Thomas Woerner authored
      The import line of ansible_ipa_client was not correct and used a test
      version of the binding that is not possible anymore due to the move of
      the module_utils directories into the specific role locations.
      bf1f8bff
  3. Mar 21, 2019
    • Thomas Woerner's avatar
      ipaclient: New module ipaclient_setup_ntp, dropped ipaclient_ntp setting · 61862820
      Thomas Woerner authored
      The new module ipaclient_setup_ntp to configure and sync time with the NTP
      server has been added. The irregular setting ipaclient_ntp has been removed.
      
      The ipaclient_setup_ntp module is using either the new sync_time call or
      for compatibility with older FreeIPA versions synconce_ntp.
      
      The reference for ipaclient_ntp in REPLICA.md has been removed also.
      
      This also fixes #55.
      61862820
    • Thomas Woerner's avatar
      ipaclient: Replace extras module with ssh, automount, firefox and nis modules · 4b2fc33b
      Thomas Woerner authored
      ipaclient_extras could configure several things internally according to
      provided settings. These have been ssh, sshd, automount, firefox an also
      nis. The ssh and sshd configuration is now plocated in ipaclient_setup_ssh,
      the automount configuration in ipaclient_setup_automount, the firefox
      configuration in ipaclient_setup_firefox and the nis configuration in
      ipaclient_setup_nis.
      
      The following additional settings have been added to
      roles/ipaclient/defaults/main.yml to provide the same configruation options
      as ipa-client-install does:
      
      ipaclient_no_ssh: no
      ipaclient_no_sshd: no
      ipaclient_no_nisdomain: no
      ipaclient_configure_firefox: no
      4b2fc33b
    • Thomas Woerner's avatar
      ipaclient role: Fix naming of modules, action_plugins and registered vars · 7c378d9c
      Thomas Woerner authored
      The naming in the ipaclient role has not been following the naming scheme
      and conventions used in the ipaserver and ipareplica roles. Also registered
      results of modules and commands have not been unsing the result_ prefix as
      in the other roles. All this has been fixed and the naming is consistent
      now.
      
      These are the renames:
      
      ipahost -> ipaclient_get_otp
      ipaapi -> ipaclient_api
      ipaextras -> ipaclient_extras
      ipafixca -> ipaclient_fix_ca
      ipafstore -> ipaclient_fstore
      ipa_facts -> ipaclient_get_facts
      ipahost -> ipaclient_get_otp
      ipajoin -> ipaclient_join
      ipanss -> ipaclient_setup_nss
      ipasssd -> ipaclient_setup_sssd
      ipadiscovery -> ipaclient_test
      ipatest -> ipaclient_test_keytab
      7c378d9c
    • Thomas Woerner's avatar
      Merge pull request #56 from dawud/feature/move_module_utils_to_specific_role · 0a67c031
      Thomas Woerner authored
      Move module_utils to role specific locations
      0a67c031
  4. Feb 20, 2019
  5. Feb 12, 2019
  6. Feb 11, 2019
  7. Feb 01, 2019
  8. Nov 26, 2018
    • Thomas Woerner's avatar
      ipareplica: Make ipaserver_enable_ipa module working for ipareplica role · e6cf0e15
      Thomas Woerner authored
      The ipareplica role is reusing the ipaserver_enable_ipa module. This module
      needed some extensions on the server to enable the delayed services and
      also to dump DNS configuration (see commit a1287265).
      For replica it is not needed to dump the DNS configuration, therefore it is
      simply possible to set detup_dns to no to make this module also working
      for ipareplica.
      e6cf0e15
  9. Nov 23, 2018
  10. Nov 22, 2018
Loading