mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-07-30 19:34:45 +00:00
Modify ipahost module: the authentication is done locally on the controller
node and the credential cache is copied to the managed node ipahost module is also using facts gathered from the server to find the domain and realm.
This commit is contained in:
11
site.yml
11
site.yml
@@ -3,17 +3,6 @@
|
||||
hosts: ipaclients
|
||||
become: true
|
||||
|
||||
pre_tasks:
|
||||
|
||||
- name: For OTP client registration, add client and get OTP
|
||||
ipahost:
|
||||
keytab: files/admin.keytab
|
||||
fqdn: "{{ ansible_fqdn }}"
|
||||
random: True
|
||||
register: ipahost
|
||||
delegate_to: "{{ groups.ipaservers[0] }}"
|
||||
|
||||
roles:
|
||||
- role: ipaclient
|
||||
state: present
|
||||
ipaclient_otp: "{{ ipahost.host.randompassword }}"
|
||||
|
||||
Reference in New Issue
Block a user