internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-08-02 04:44:42 +00:00
Code Issues Projects Releases Wiki Activity

ipa[server,replica]: Calm down ansible and yaml lint in ansible-galaxy

Browse Source
This commit is contained in:
Thomas Woerner
2019-05-03 19:11:58 +02:00
parent 2be00c1e0f
commit 36afd2220e
6 changed files with 141 additions and 100 deletions
Download Patch File Download Diff File Expand all files Collapse all files

97
roles/ipareplica/tasks/install.yml
View File

@@ -39,8 +39,10 @@
# dm_password: "{{ ipadm_password | default(omit) }}" # dm_password: "{{ ipadm_password | default(omit) }}"
# password: "{{ ipaadmin_password | default(omit) }}" # password: "{{ ipaadmin_password | default(omit) }}"
ip_addresses: "{{ ipareplica_ip_addresses | default([]) }}" ip_addresses: "{{ ipareplica_ip_addresses | default([]) }}"
domain: "{{ ipareplica_domain | default(ipaserver_domain) | default(omit) }}" domain: "{{ ipareplica_domain | default(ipaserver_domain) |
servers: "{{ groups.ipaservers | default(groups.ipaserver) | default(omit) }}" default(omit) }}"
servers: "{{ groups.ipaservers | default(groups.ipaserver) |
default(omit) }}"
realm: "{{ ipareplica_realm | default(omit) }}" realm: "{{ ipareplica_realm | default(omit) }}"
hostname: "{{ ipareplica_hostname | default(ansible_fqdn) }}" hostname: "{{ ipareplica_hostname | default(ansible_fqdn) }}"
ca_cert_files: "{{ ipareplica_ca_cert_files | default([]) }}" ca_cert_files: "{{ ipareplica_ca_cert_files | default([]) }}"
@@ -83,15 +85,8 @@
ipaclient_realm: "{{ result_ipareplica_test.realm }}" ipaclient_realm: "{{ result_ipareplica_test.realm }}"
ipaclient_servers: ["{{ result_ipareplica_test.server }}"] ipaclient_servers: ["{{ result_ipareplica_test.server }}"]
ipaclient_hostname: "{{ result_ipareplica_test.hostname }}" ipaclient_hostname: "{{ result_ipareplica_test.hostname }}"
#ipaclient_keytab: "{{ ipaclient_keytab }}" ipaclient_no_ntp: "{{ result_ipareplica_test.ipa_python_version
#ipaclient_mkhomedir: "{{ ipaclient_mkhomedir }}" < 40690 }}"
#ipaclient_force_join: "{{ ipaclient_force_join }}"
##ipaclient_no_ntp: "{{ ipaclient_no_ntp }}"
ipaclient_no_ntp: "{{ result_ipareplica_test.ipa_python_version < 40690 }}"
#ipaclient_ssh_trust_dns: "{{ ipaclient_ssh_trust_dns }}"
##ipaclient_no_ssh: "{{ ipaclient_no_ssh }}"
##ipaclient_no_sshd: "{{ ipaclient_no_sshd }}"
##ipaclient_no_dns_sshfp: "{{ ipaclient_no_dns_sshfp }}"
ipaclient_install_packages: "{{ ipareplica_install_packages }}" ipaclient_install_packages: "{{ ipareplica_install_packages }}"
when: not result_ipareplica_test.client_enrolled when: not result_ipareplica_test.client_enrolled
@@ -173,7 +168,8 @@
### server ### ### server ###
setup_kra: "{{ result_ipareplica_test.setup_kra }}" setup_kra: "{{ result_ipareplica_test.setup_kra }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
installer_ccache: "{{ result_ipareplica_prepare.installer_ccache }}" installer_ccache: "{{ result_ipareplica_prepare.installer_ccache }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
@@ -189,7 +185,8 @@
- name: Install - Set dirman password - name: Install - Set dirman password
no_log: yes no_log: yes
set_fact: set_fact:
ipareplica_dirman_password: "{{ result_ipareplica_master_password.password }}" ipareplica_dirman_password:
"{{ result_ipareplica_master_password.password }}"
- name: Install - Setup certmonger - name: Install - Setup certmonger
ipareplica_setup_certmonger: ipareplica_setup_certmonger:
@@ -234,7 +231,8 @@
_subject_base: "{{ result_ipareplica_prepare._subject_base }}" _subject_base: "{{ result_ipareplica_prepare._subject_base }}"
dirman_password: "{{ ipareplica_dirman_password }}" dirman_password: "{{ ipareplica_dirman_password }}"
config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}" config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}"
config_ips: "{{ result_ipareplica_prepare.config_ips }}" config_ips: "{{ result_ipareplica_prepare.config_ips }}"
register: result_ipareplica_install_ca_certs register: result_ipareplica_install_ca_certs
@@ -280,7 +278,8 @@
_subject_base: "{{ result_ipareplica_prepare._subject_base }}" _subject_base: "{{ result_ipareplica_prepare._subject_base }}"
dirman_password: "{{ ipareplica_dirman_password }}" dirman_password: "{{ ipareplica_dirman_password }}"
config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}" config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}"
config_ips: "{{ result_ipareplica_prepare.config_ips }}" config_ips: "{{ result_ipareplica_prepare.config_ips }}"
register: result_ipareplica_setup_ds register: result_ipareplica_setup_ds
@@ -310,7 +309,8 @@
secondary_rid_base: "{{ ipareplica_secondary_rid_base | default(omit) }}" secondary_rid_base: "{{ ipareplica_secondary_rid_base | default(omit) }}"
### additional ### ### additional ###
server: "{{ result_ipareplica_test.server }}" server: "{{ result_ipareplica_test.server }}"
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
installer_ccache: "{{ result_ipareplica_prepare.installer_ccache }}" installer_ccache: "{{ result_ipareplica_prepare.installer_ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
@@ -334,7 +334,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_pkinit_pkcs12_info: "{{ result_ipareplica_prepare._pkinit_pkcs12_info }}" _pkinit_pkcs12_info: "{{ result_ipareplica_prepare._pkinit_pkcs12_info }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
@@ -349,7 +350,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
_ca_file: "{{ result_ipareplica_prepare._ca_file }}" _ca_file: "{{ result_ipareplica_prepare._ca_file }}"
@@ -368,7 +370,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}" config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
@@ -387,7 +390,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
_ca_file: "{{ result_ipareplica_prepare._ca_file }}" _ca_file: "{{ result_ipareplica_prepare._ca_file }}"
@@ -404,7 +408,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
_ca_file: "{{ result_ipareplica_prepare._ca_file }}" _ca_file: "{{ result_ipareplica_prepare._ca_file }}"
@@ -431,8 +436,10 @@
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
dirman_password: "{{ ipareplica_dirman_password }}" dirman_password: "{{ ipareplica_dirman_password }}"
config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
config_ca_host_name: "{{ result_ipareplica_install_ca_certs.config_ca_host_name }}" "{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
config_ca_host_name:
"{{ result_ipareplica_install_ca_certs.config_ca_host_name }}"
config_ips: "{{ result_ipareplica_prepare.config_ips }}" config_ips: "{{ result_ipareplica_prepare.config_ips }}"
when: result_ipareplica_prepare._ca_enabled when: result_ipareplica_prepare._ca_enabled
@@ -446,7 +453,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
_ca_file: "{{ result_ipareplica_prepare._ca_file }}" _ca_file: "{{ result_ipareplica_prepare._ca_file }}"
@@ -465,7 +473,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
_ca_file: "{{ result_ipareplica_prepare._ca_file }}" _ca_file: "{{ result_ipareplica_prepare._ca_file }}"
@@ -498,7 +507,8 @@
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
server: "{{ result_ipareplica_test.server }}" server: "{{ result_ipareplica_test.server }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
installer_ccache: "{{ result_ipareplica_prepare.installer_ccache }}" installer_ccache: "{{ result_ipareplica_prepare.installer_ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
@@ -522,7 +532,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_install_ca_certs.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_install_ca_certs.config_master_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
_ca_file: "{{ result_ipareplica_prepare._ca_file }}" _ca_file: "{{ result_ipareplica_prepare._ca_file }}"
@@ -540,7 +551,8 @@
### certificate system ### ### certificate system ###
subject_base: "{{ result_ipareplica_prepare.subject_base }}" subject_base: "{{ result_ipareplica_prepare.subject_base }}"
### additional ### ### additional ###
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}" config_ca_host_name: "{{ result_ipareplica_prepare.config_ca_host_name }}"
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}" _ca_enabled: "{{ result_ipareplica_prepare._ca_enabled }}"
@@ -560,7 +572,8 @@
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
- name: Install - Promote openldap.conf - name: Install - Promote openldap.conf
ipareplica_promote_openldap_conf: ipareplica_promote_openldap_conf:
@@ -572,7 +585,8 @@
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" config_setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
- name: Install - Setup DNS - name: Install - Setup DNS
ipareplica_setup_dns: ipareplica_setup_dns:
@@ -585,13 +599,16 @@
### dns ### ### dns ###
zonemgr: "{{ ipareplica_zonemgr | default(omit) }}" zonemgr: "{{ ipareplica_zonemgr | default(omit) }}"
forwarders: "{{ ipareplica_forwarders | default([]) }}" forwarders: "{{ ipareplica_forwarders | default([]) }}"
forward_policy: "{{ result_ipareplica_prepare.forward_policy if result_ipareplica_prepare.forward_policy is not none else omit }}" forward_policy: "{{ result_ipareplica_prepare.forward_policy if
result_ipareplica_prepare.forward_policy is
not none else omit }}"
no_dnssec_validation: "{{ ipareplica_no_dnssec_validation }}" no_dnssec_validation: "{{ ipareplica_no_dnssec_validation }}"
### additional ### ### additional ###
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
- name: Install - Setup adtrust - name: Install - Setup adtrust
ipareplica_setup_adtrust: ipareplica_setup_adtrust:
@@ -607,9 +624,12 @@
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
adtrust_netbios_name: "{{ result_ipareplica_prepare.adtrust_netbios_name }}" "{{ result_ipareplica_prepare.config_master_host_name }}"
adtrust_reset_netbios_name: "{{ result_ipareplica_prepare.adtrust_reset_netbios_name }}" adtrust_netbios_name:
"{{ result_ipareplica_prepare.adtrust_netbios_name }}"
adtrust_reset_netbios_name:
"{{ result_ipareplica_prepare.adtrust_reset_netbios_name }}"
when: result_ipareplica_test.setup_adtrust when: result_ipareplica_test.setup_adtrust
# - name: Install - Disconnect backend # - name: Install - Disconnect backend
@@ -624,7 +644,8 @@
ccache: "{{ result_ipareplica_prepare.ccache }}" ccache: "{{ result_ipareplica_prepare.ccache }}"
_top_dir: "{{ result_ipareplica_prepare._top_dir }}" _top_dir: "{{ result_ipareplica_prepare._top_dir }}"
setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}" setup_ca: "{{ result_ipareplica_prepare.config_setup_ca }}"
config_master_host_name: "{{ result_ipareplica_prepare.config_master_host_name }}" config_master_host_name:
"{{ result_ipareplica_prepare.config_master_host_name }}"
register: result_ipareplica_enable_ipa register: result_ipareplica_enable_ipa
- name: Install - Cleanup root IPA cache - name: Install - Cleanup root IPA cache
@@ -633,4 +654,6 @@
state: absent state: absent
when: result_ipareplica_enable_ipa.changed when: result_ipareplica_enable_ipa.changed
when: not ansible_check_mode and not (result_ipareplica_test.client_already_configured is defined or result_ipareplica_test.server_already_configured is defined) when: not ansible_check_mode and
not (result_ipareplica_test.client_already_configured is defined or
result_ipareplica_test.server_already_configured is defined)

4
roles/ipareplica/tasks/python_2_3_test.yml
View File

@@ -1,3 +1,4 @@
---
- block: - block:
- name: Verify Python3 import - name: Verify Python3 import
script: py3test.py script: py3test.py
@@ -13,7 +14,8 @@
- name: Fail for IPA 4.5.90 - name: Fail for IPA 4.5.90
fail: msg="You need to install python2 bindings for ipa server usage" fail: msg="You need to install python2 bindings for ipa server usage"
when: result_py3test.rc != 0 and "not usable with python3" in result_py3test.stdout when: result_py3test.rc != 0 and "not usable with python3" in
result_py3test.stdout
- name: Set python interpreter to 2 - name: Set python interpreter to 2
set_fact: set_fact:

12
roles/ipareplica/tasks/uninstall.yml
View File

@@ -9,12 +9,16 @@
/usr/sbin/ipa-server-install /usr/sbin/ipa-server-install
--uninstall --uninstall
-U -U
{{ "--ignore-topology-disconnect" if ipareplica_ignore_topology_disconnect | bool else "" }} {{ "--ignore-topology-disconnect" if
{{ "--ignore-last-of-role" if ipareplica_ignore_last_of_role | bool else "" }} ipareplica_ignore_topology_disconnect | bool else "" }}
{{ "--ignore-last-of-role" if ipareplica_ignore_last_of_role | bool
else "" }}
register: result_uninstall register: result_uninstall
# 2 means that uninstall failed because IPA replica was not configured # 2 means that uninstall failed because IPA replica was not configured
failed_when: result_uninstall.rc != 0 and "'Env' object has no attribute 'basedn'" not in result_uninstall.stderr failed_when: result_uninstall.rc != 0 and "'Env' object
#IPA server is not configured on this system" not in result_uninstall.stdout_lines has no attribute 'basedn'" not in result_uninstall.stderr
# IPA server is not configured on this system" not in
# result_uninstall.stdout_lines
# changed_when: result_uninstall.rc == 0 # changed_when: result_uninstall.rc == 0
# until: result_uninstall.rc == 0 # until: result_uninstall.rc == 0
retries: 2 retries: 2

21
roles/ipaserver/tasks/install.yml
View File

@@ -111,7 +111,8 @@
- name: Install - Use new master password - name: Install - Use new master password
no_log: yes no_log: yes
set_fact: set_fact:
ipaserver_master_password: "{{ result_ipaserver_master_password.password }}" ipaserver_master_password:
"{{ result_ipaserver_master_password.password }}"
when: ipaserver_master_password is undefined when: ipaserver_master_password is undefined
@@ -155,7 +156,8 @@
- name: Install - Setup NTP - name: Install - Setup NTP
ipaserver_setup_ntp: ipaserver_setup_ntp:
when: not ipaclient_no_ntp | bool and (ipaserver_external_cert_files is undefined or ipaserver_external_cert_files|length < 1) when: not ipaclient_no_ntp | bool and (ipaserver_external_cert_files
is undefined or ipaserver_external_cert_files|length < 1)
- name: Install - Setup DS - name: Install - Setup DS
ipaserver_setup_ds: ipaserver_setup_ds:
@@ -243,7 +245,8 @@
_subject_base: "{{ result_ipaserver_test._subject_base }}" _subject_base: "{{ result_ipaserver_test._subject_base }}"
ca_subject: "{{ result_ipaserver_test.ca_subject }}" ca_subject: "{{ result_ipaserver_test.ca_subject }}"
_ca_subject: "{{ result_ipaserver_test._ca_subject }}" _ca_subject: "{{ result_ipaserver_test._ca_subject }}"
ca_signing_algorithm: "{{ ipaserver_ca_signing_algorithm | default(omit) }}" ca_signing_algorithm: "{{ ipaserver_ca_signing_algorithm |
default(omit) }}"
reverse_zones: "{{ result_ipaserver_test.reverse_zones }}" reverse_zones: "{{ result_ipaserver_test.reverse_zones }}"
no_reverse: "{{ ipaserver_no_reverse }}" no_reverse: "{{ ipaserver_no_reverse }}"
auto_forwarders: "{{ ipaserver_auto_forwarders }}" auto_forwarders: "{{ ipaserver_auto_forwarders }}"
@@ -318,7 +321,8 @@
secondary_rid_base: "{{ result_ipaserver_test.secondary_rid_base }}" secondary_rid_base: "{{ result_ipaserver_test.secondary_rid_base }}"
### additional ### ### additional ###
adtrust_netbios_name: "{{ result_ipaserver_test.adtrust_netbios_name }}" adtrust_netbios_name: "{{ result_ipaserver_test.adtrust_netbios_name }}"
adtrust_reset_netbios_name: "{{ result_ipaserver_test.adtrust_reset_netbios_name }}" adtrust_reset_netbios_name:
"{{ result_ipaserver_test.adtrust_reset_netbios_name }}"
when: result_ipaserver_test.setup_adtrust when: result_ipaserver_test.setup_adtrust
- name: Install - Set DS password - name: Install - Set DS password
@@ -348,7 +352,9 @@
ipaclient_realm: "{{ result_ipaserver_test.realm }}" ipaclient_realm: "{{ result_ipaserver_test.realm }}"
ipaclient_servers: ["{{ result_ipaserver_test.hostname }}"] ipaclient_servers: ["{{ result_ipaserver_test.hostname }}"]
ipaclient_hostname: "{{ result_ipaserver_test.hostname }}" ipaclient_hostname: "{{ result_ipaserver_test.hostname }}"
ipaclient_no_ntp: "{{ 'true' if result_ipaserver_test.ipa_python_version >= 40690 else 'false' }}" ipaclient_no_ntp:
"{{ 'true' if result_ipaserver_test.ipa_python_version >= 40690
else 'false' }}"
ipaclient_install_packages: "{{ ipaserver_install_packages }}" ipaclient_install_packages: "{{ ipaserver_install_packages }}"
# - name: Install - Setup client # - name: Install - Setup client
@@ -398,4 +404,7 @@
{{ "--add-service=ntp" if not ipaclient_no_ntp | bool else "" }} {{ "--add-service=ntp" if not ipaclient_no_ntp | bool else "" }}
when: ipaserver_setup_firewalld | bool when: ipaserver_setup_firewalld | bool
when: not ansible_check_mode and not (not result_ipaserver_test.changed and (result_ipaserver_test.client_already_configured is defined or result_ipaserver_test.server_already_configured is defined)) when: not ansible_check_mode and not
(not result_ipaserver_test.changed and
(result_ipaserver_test.client_already_configured is defined or
result_ipaserver_test.server_already_configured is defined))

4
roles/ipaserver/tasks/python_2_3_test.yml
View File

@@ -1,3 +1,4 @@
---
- block: - block:
- name: Verify Python3 import - name: Verify Python3 import
script: py3test.py script: py3test.py
@@ -13,7 +14,8 @@
- name: Fail for IPA 4.5.90 - name: Fail for IPA 4.5.90
fail: msg="You need to install python2 bindings for ipa server usage" fail: msg="You need to install python2 bindings for ipa server usage"
when: result_py3test.rc != 0 and "not usable with python3" in result_py3test.stdout when: result_py3test.rc != 0 and "not usable with python3"
in result_py3test.stdout
- name: Set python interpreter to 2 - name: Set python interpreter to 2
set_fact: set_fact:

3
roles/ipaserver/tasks/uninstall.yml
View File

@@ -9,7 +9,8 @@
/usr/sbin/ipa-server-install /usr/sbin/ipa-server-install
--uninstall --uninstall
-U -U
{{ '--ignore-topology-disconnect' if ipaserver_ignore_topology_disconnect | bool else '' }} {{ '--ignore-topology-disconnect' if ipaserver_ignore_topology_disconnect
| bool else '' }}
{{ '--ignore-last-of-role' if ipaserver_ignore_last_of_role | bool else ''}} {{ '--ignore-last-of-role' if ipaserver_ignore_last_of_role | bool else ''}}
register: uninstall register: uninstall
# 1 means that uninstall failed because IPA server was not configured # 1 means that uninstall failed because IPA server was not configured