roles/ipaclient/tasks/install.yml: Set no_log:yes for OTP generation and usage

This commit is contained in:
Thomas Woerner
2017-09-19 18:08:24 +02:00
parent 4918ac508f
commit 375500df37

View File

@@ -46,6 +46,7 @@
# if ipaclient_use_otp is set. # if ipaclient_use_otp is set.
- block: - block:
- name: Install - Get a One-Time Password for client enrollment - name: Install - Get a One-Time Password for client enrollment
no_log: yes
ipahost: ipahost:
state: present state: present
principal: "{{ ipaadmin_principal | default('admin') }}" principal: "{{ ipaadmin_principal | default('admin') }}"
@@ -61,6 +62,7 @@
delegate_to: "{{ ipadiscovery.servers[0] }}" delegate_to: "{{ ipadiscovery.servers[0] }}"
- name: Install - Store the previously obtained OTP - name: Install - Store the previously obtained OTP
no_log: yes
set_fact: set_fact:
ipaadmin_password: "{{ ipahost_output.host.randompassword if ipahost_output.host is defined }}" ipaadmin_password: "{{ ipahost_output.host.randompassword if ipahost_output.host is defined }}"