Commits on Source (21)
-
Thomas Woerner authored
The ipaclient_automount_location variable was badly named as ipaautomount_location. Additionally it was not documented in the role README file. Fixes: #1166 (.. automount-location to the ipa-client role)
b22bf4df -
Rafael Guterres Jeffman authored
If a playbook to ensure the existence of a user contains 'random:false' and 'update_password: always' is executed twice, the second execution will raise an exception due to "No modifications to perform", as there is actually nothing to modify. The fix for the issue is to remove 'random' if it is not set to true, as setting it to 'false' would have no effect on the user object. Related: https://issues.redhat.com/browse/RHEL-4934
ca549691 -
Rafael Guterres Jeffman authored
The parameter 'allow_empty_string' in 'module_params_get' is used to allow an item in a list to be an empty string. The problem is that the naming is misleading, as it is checking a list item rather than a string. This patch rename the parameter to 'allow_empty_list_item' so that it more clearly refers to list itens instead of standalone strings, and do not collide with future parameters that may test for empty strings which are not part of lists.
f4c9e287 -
Thomas Woerner authored
ipauser: Do not try to modify user when not changing password
-
Rafael Guterres Jeffman authored
Some parameters, in modules, have a specific data type, but allow the use of an empty string to clear the parameter. By providing a method to retrieve the parameter with the correct data type, or optionally an empty string, allows for consistency of parameter handling between different modules.
e55a41ca -
Rafael Guterres Jeffman authored
Use the commom parameter type handling method for parameters that accept a value or an empty string.
92d579be -
Rafael Guterres Jeffman authored
Use the commom parameter type handling method for parameters that accept a value or an empty string.
bc694b72 -
Rafael Guterres Jeffman authored
Use the commom parameter type handling method for parameters that accept a value or an empty string.
34973c04 -
Thomas Woerner authored
Handle data type or empty string in module_utils
-
Rafael Guterres Jeffman authored
ipaclient: Properly name automount_location var and add documentation
-
Rafael Guterres Jeffman authored
IPA DNS Zones management can be delegated by adding a "Manage DNS zone" permission. The CLI commands that manage these permissions are dnszone-add-permission and dnszone-remove-permission. The ansible-freeipa module ipadnszone did not have this capability, and it now support dnszone per-zone management delegation by setting the module parameter 'permission'. If set to 'true' the permission will be assigned to the zone, if set to false the permission will be removed.
3bd68ac0 -
Rafael Guterres Jeffman authored
FreeIPA suports renaming user objects with the CLI parameter "rename", and this parameter was missing in ansible-freeipa ipauser module. This patch adds support for a new state 'renamed' and the 'rename' parameter. Tests were updated to cope with the changes. Related to RHBZ#2234379, RHBZ#2234380 Fixes #1103
3eb86b2c -
Thomas Woerner authored
ipadnszone: Add support for per-zone privilege delegation
-
Thomas Woerner authored
ipauser: Add support for renaming users
-
Rafael Guterres Jeffman authored
Use module_defaults to improve reading test cases.
3fe41a52 -
Thomas Woerner authored
- Replace outdated noqa 503 with noqa no-handler - Drop outdated and not needed noqa 505 for include_vars - Drop outdated noqa deprecated-command-syntax for ansible.builtin.shell using cmd tag These warnings have been reported by utils/lint_check.sh using ansible-lint 6.22.1.
47a1d50c -
Rafael Guterres Jeffman authored
FreeIPA suports renaming groupobjects with the CLI parameter "rename", and this parameter was missing in ansible-freeipa ipagroup module. This patch adds support for a new state 'renamed' and the 'rename' parameter. Tests were updated to cope with the changes.
1ecdbd3a -
Rafael Guterres Jeffman authored
Fixes for ansible-lint 6.22.1
-
Thomas Woerner authored
ipagroup: Add support for renaming groups
-
Rafael Guterres Jeffman authored
On IPA CLI sudorule-add/del-runasuser accept 'group' as a parameter, and this option was missing in ansible-freeipa ipasudorule module. This patch adds a new parameter 'runasuser_group' to allow setting Groups of RunAs Users, as allowed by CLI and WebUI. New example playboks can be found at: playbooks/sudorule/ensure-sudorule-runasusesr-group-is-absent.yml playbooks/sudorule/ensure-sudorule-runasusesr-group-is-present.yml
1fde1764 -
Thomas Woerner authored
ipasudorule: Allow setting groups for runasuser.