Skip to content
  1. Sep 07, 2021
    • Thomas Woerner's avatar
      automember: Use execute_ipa_commands · e6f0eb23
      Thomas Woerner authored
      execute_ipa_commands replces the check mode exit, the loop over the
      generated commands and also in the member failure handling for modules
      with member support.
      e6f0eb23
  2. Sep 02, 2021
  3. Sep 01, 2021
  4. Aug 24, 2021
    • Thomas Woerner's avatar
      New ipamodule_base_vars · 7a665bdb
      Thomas Woerner authored
      There are common parameters in all modules like ipaadmin_principal and
      ipaadmin_password. As this list of common parameters will be extended
      soon, there is a need to reduce the code and documentation duplicates.
      
      A ModuleDocFragment is added to provide the module documentation for the
      common parameters. This is used in the modules with
      extends_documentation_fragment.
      
      ansible_freeipa_module has additional ipamodule_base_spec and
      get_ipamodule_base_vars. ipamodule_base_spec extends argument_spec in
      the module and get_ipamodule_base_vars is used to return a dict
      containing the common parameters.
      7a665bdb
  5. Aug 23, 2021
    • Rafael Guterres Jeffman's avatar
      dnszone: remove variable `serial`. · 9454bcaa
      Rafael Guterres Jeffman authored
      As of FreeIPA 4.9.7, setting SOA serial is deprecated, so this change
      removes support for setting this variable in ipadnszone module.
      9454bcaa
    • Thomas Woerner's avatar
      sudorule: Reduce addition and deletion of members to changed only · 8561e0bb
      Thomas Woerner authored
      Use gen_add_list and gen_intersection_list for host, hostgroup, user,
      group, allow_sudocmd, allow_sudocmdgroup, deny_sudocmd, deny_sudocmdgroup,
      sudooption, runasuser, runasgroup and res_find member handling.
      
      The functions are used to reduce the add lists to the new entries
      only and the delete lists to the entries that are in the user and
      the show list result.
      
      This enables to remove the ignores for "already a member" and
      "not a member" errors..
      8561e0bb
  6. Aug 20, 2021
    • Thomas Woerner's avatar
      hbacrule: Create FQDN from single hostnames · b8488cb9
      Thomas Woerner authored
      Single hostnames can be used for hbacrule_add_host and will match fqdn
      in IPA internally. Simple host names have to be extended to be FQDN to
      be able to compare them for _host_add and _host_remove.
      
      Two new functions have been added to ansible_freeipa_module:
      
      - api_get_domain - Get the domain from the api
      - ensure_fqdn - Extend a single name with the domain
      
      This fixes #617 - hbacrule_add_host: already a member
      b8488cb9
  7. Jul 16, 2021
  8. Jul 14, 2021
    • chrisp's avatar
      New automountlocation module · 6a87db06
      chrisp authored
      There is a new automount location management module placed in the plugins folder:
      
      plugins/modules/ipaautomountlocation.py
      
      This module allows to ensure presence and absence of automount locations
      that act as containers for automount onjects in ipa.
      
      Here is the documentation for the module:
      
      README-automountlocation.md
      
      New example playbooks have been added:
      
      playbooks/automount/automount-location-absent.yml
      playbooks/automount/automount-location-present.yml
      
      New tests for the module:
      
      tests/automount/test_automountlocation.yml
      6a87db06
  9. Jul 13, 2021
    • Thomas Woerner's avatar
      automember: Verify condition keys · 382ee6ff
      Thomas Woerner authored
      The automember_add_condition and automember_remove_condition commands
      are not verifying condition keys in all cases. This is for example not
      done in the removal case if a condition is not part of the automember
      rule.
      
      For consistent behaviour this needs to be done in the automember module
      now. The condition keys are verified with the user and group aciattrs
      returned by the API command json_metadata now.
      
      Related: RHBZ#1976926
      382ee6ff
Loading