mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-07-31 03:44:41 +00:00
Fix modules documentation and remove unused variables
This commit is contained in:
@@ -33,9 +33,6 @@ short description: Create temporary NSS database, call IPA API for remaining enr
|
|||||||
description:
|
description:
|
||||||
Create temporary NSS database, call IPA API for remaining enrollment parts
|
Create temporary NSS database, call IPA API for remaining enrollment parts
|
||||||
options:
|
options:
|
||||||
servers:
|
|
||||||
description: The FQDN of the IPA servers to connect to.
|
|
||||||
required: false
|
|
||||||
realm:
|
realm:
|
||||||
description: The Kerberos realm of an existing IPA deployment.
|
description: The Kerberos realm of an existing IPA deployment.
|
||||||
required: true
|
required: true
|
||||||
@@ -45,6 +42,8 @@ options:
|
|||||||
debug:
|
debug:
|
||||||
description: Turn on extra debugging
|
description: Turn on extra debugging
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
@@ -141,8 +140,6 @@ def main():
|
|||||||
servers = module.params.get('servers')
|
servers = module.params.get('servers')
|
||||||
debug = module.params.get('debug')
|
debug = module.params.get('debug')
|
||||||
|
|
||||||
fstore = sysrestore.FileStore(paths.IPA_CLIENT_SYSRESTORE)
|
|
||||||
statestore = sysrestore.StateFile(paths.IPA_CLIENT_SYSRESTORE)
|
|
||||||
host_principal = 'host/%s@%s' % (hostname, realm)
|
host_principal = 'host/%s@%s' % (hostname, realm)
|
||||||
os.environ['KRB5CCNAME'] = paths.IPA_DNS_CCACHE
|
os.environ['KRB5CCNAME'] = paths.IPA_DNS_CCACHE
|
||||||
|
|
||||||
@@ -170,7 +167,6 @@ def main():
|
|||||||
pass
|
pass
|
||||||
|
|
||||||
# Add CA certs to a temporary NSS database
|
# Add CA certs to a temporary NSS database
|
||||||
argspec = inspect.getargspec(tmp_db.create_db)
|
|
||||||
try:
|
try:
|
||||||
if NUM_VERSION > 40404:
|
if NUM_VERSION > 40404:
|
||||||
tmp_db.create_db()
|
tmp_db.create_db()
|
||||||
|
|||||||
@@ -39,6 +39,7 @@ options:
|
|||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
default: []
|
||||||
domain:
|
domain:
|
||||||
description: The primary DNS domain of an existing IPA deployment.
|
description: The primary DNS domain of an existing IPA deployment.
|
||||||
required: false
|
required: false
|
||||||
@@ -46,7 +47,7 @@ options:
|
|||||||
description: The Kerberos realm of an existing IPA deployment.
|
description: The Kerberos realm of an existing IPA deployment.
|
||||||
required: false
|
required: false
|
||||||
hostname:
|
hostname:
|
||||||
description: The authorized kerberos principal used to join the IPA realm.
|
description: The hostname of the machine to join (FQDN).
|
||||||
required: false
|
required: false
|
||||||
ca_cert_file:
|
ca_cert_file:
|
||||||
description: A CA certificate to use.
|
description: A CA certificate to use.
|
||||||
@@ -55,6 +56,8 @@ options:
|
|||||||
description: Check if IPA client is installed and matching.
|
description: Check if IPA client is installed and matching.
|
||||||
required: false
|
required: false
|
||||||
default: false
|
default: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
|
|||||||
@@ -37,42 +37,52 @@ Configure IPA extras
|
|||||||
options:
|
options:
|
||||||
servers:
|
servers:
|
||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: false
|
required: true
|
||||||
|
type: list
|
||||||
domain:
|
domain:
|
||||||
description: The primary DNS domain of an existing IPA deployment.
|
description: The primary DNS domain of an existing IPA deployment.
|
||||||
required: false
|
required: true
|
||||||
ntp:
|
ntp:
|
||||||
description: Set to no to not configure and enable NTP
|
description: Set to no to not configure and enable NTP
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
force_ntpd:
|
force_ntpd:
|
||||||
description: Stop and disable any time&date synchronization services besides ntpd.
|
description: Stop and disable any time&date synchronization services besides ntpd.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
ntp_servers:
|
ntp_servers:
|
||||||
description: The ntp servers to configure if ntp is enabled.
|
description: The ntp servers to configure if ntp is enabled.
|
||||||
required: false
|
required: false
|
||||||
|
type: list
|
||||||
ssh:
|
ssh:
|
||||||
description: Configure OpenSSH client
|
description: Configure OpenSSH client
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
default: yes
|
default: yes
|
||||||
sssd:
|
sssd:
|
||||||
description: Configure the client to use SSSD for authentication
|
description: Configure the client to use SSSD for authentication
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
default: yes
|
default: yes
|
||||||
trust_sshfp:
|
trust_sshfp:
|
||||||
description: Configure OpenSSH client to trust DNS SSHFP records
|
description: Configure OpenSSH client to trust DNS SSHFP records
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
default: yes
|
default: yes
|
||||||
sshd:
|
sshd:
|
||||||
description: Configure OpenSSH server
|
description: Configure OpenSSH server
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
default: yes
|
default: yes
|
||||||
automount_location:
|
automount_location:
|
||||||
description: Automount location
|
description: Automount location
|
||||||
required: false
|
required: false
|
||||||
default: no
|
|
||||||
firefox:
|
firefox:
|
||||||
description: Configure Firefox to use IPA domain credentials
|
description: Configure Firefox to use IPA domain credentials
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
default: no
|
default: no
|
||||||
firefox_dir:
|
firefox_dir:
|
||||||
description: Specify directory where Firefox is installed (for example: '/usr/lib/firefox')
|
description: Specify directory where Firefox is installed (for example: '/usr/lib/firefox')
|
||||||
@@ -80,11 +90,16 @@ options:
|
|||||||
no_nisdomain:
|
no_nisdomain:
|
||||||
description: Do not configure NIS domain name
|
description: Do not configure NIS domain name
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
default: no
|
default: no
|
||||||
nisdomain:
|
nisdomain:
|
||||||
description: NIS domain name
|
description: NIS domain name
|
||||||
required: false
|
required: false
|
||||||
on_master:
|
on_master:
|
||||||
|
description: Whether the configuration is done on the master or not.
|
||||||
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
|
|||||||
@@ -28,14 +28,15 @@ ANSIBLE_METADATA = {'metadata_version': '1.0',
|
|||||||
|
|
||||||
DOCUMENTATION = '''
|
DOCUMENTATION = '''
|
||||||
---
|
---
|
||||||
module: ipaapi
|
module: ipafixca
|
||||||
short description: Fix IPA ca certificate
|
short description: Fix IPA ca certificate
|
||||||
description:
|
description:
|
||||||
Repair Fix IPA ca certificate
|
Repair Fix IPA ca certificate
|
||||||
options:
|
options:
|
||||||
servers:
|
servers:
|
||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: false
|
required: true
|
||||||
|
type: list
|
||||||
realm:
|
realm:
|
||||||
description: The Kerberos realm of an existing IPA deployment.
|
description: The Kerberos realm of an existing IPA deployment.
|
||||||
required: true
|
required: true
|
||||||
@@ -43,9 +44,10 @@ options:
|
|||||||
description: The basedn of the IPA server (of the form dc=example,dc=com).
|
description: The basedn of the IPA server (of the form dc=example,dc=com).
|
||||||
required: true
|
required: true
|
||||||
allow_repair:
|
allow_repair:
|
||||||
deescription: Allow repair of already joined hosts. Contrary to ipaclient_force_join the host entry will not be changed on the server.
|
description: Allow repair of already joined hosts. Contrary to ipaclient_force_join the host entry will not be changed on the server.
|
||||||
required: true
|
required: true
|
||||||
type: boolean
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
|
|||||||
@@ -38,6 +38,7 @@ options:
|
|||||||
servers:
|
servers:
|
||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: true
|
required: true
|
||||||
|
type: list
|
||||||
domain:
|
domain:
|
||||||
description: The primary DNS domain of an existing IPA deployment.
|
description: The primary DNS domain of an existing IPA deployment.
|
||||||
required: true
|
required: true
|
||||||
@@ -68,13 +69,18 @@ options:
|
|||||||
force_join:
|
force_join:
|
||||||
description: Force enrolling the host even if host entry exists.
|
description: Force enrolling the host even if host entry exists.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
kinit_attempts:
|
kinit_attempts:
|
||||||
description: Repeat the request for host Kerberos ticket X times.
|
description: Repeat the request for host Kerberos ticket X times.
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
default: 5
|
default: 5
|
||||||
debug:
|
debug:
|
||||||
description: Enable debug mode.
|
description: Enable debug mode.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
|
|||||||
@@ -38,6 +38,7 @@ options:
|
|||||||
servers:
|
servers:
|
||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: true
|
required: true
|
||||||
|
type: list
|
||||||
domain:
|
domain:
|
||||||
description: The primary DNS domain of an existing IPA deployment.
|
description: The primary DNS domain of an existing IPA deployment.
|
||||||
required: true
|
required: true
|
||||||
@@ -57,14 +58,20 @@ options:
|
|||||||
description: The subject base, needed for certmonger
|
description: The subject base, needed for certmonger
|
||||||
required: true
|
required: true
|
||||||
ca_enabled:
|
ca_enabled:
|
||||||
description: Wheter the Certificate Authority is enabled or not.
|
description: Whether the Certificate Authority is enabled or not.
|
||||||
required: true
|
required: true
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
mkhomedir:
|
mkhomedir:
|
||||||
description: Whether to create home directories for users on their first login.
|
description: Whether to create home directories for users on their first login.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
on_master:
|
on_master:
|
||||||
description: Whether the configuration is done on the maseter or not.
|
description: Whether the configuration is done on the master or not.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
@@ -296,8 +303,6 @@ def main():
|
|||||||
if nslcd.is_installed():
|
if nslcd.is_installed():
|
||||||
save_state(nslcd, statestore)
|
save_state(nslcd, statestore)
|
||||||
|
|
||||||
retcode, conf = (0, None)
|
|
||||||
|
|
||||||
##########################################################################
|
##########################################################################
|
||||||
|
|
||||||
# Modify nsswitch/pam stack
|
# Modify nsswitch/pam stack
|
||||||
|
|||||||
@@ -37,10 +37,11 @@ Configure sssd
|
|||||||
options:
|
options:
|
||||||
servers:
|
servers:
|
||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: false
|
required: true
|
||||||
|
type: list
|
||||||
domain:
|
domain:
|
||||||
description: The primary DNS domain of an existing IPA deployment.
|
description: The primary DNS domain of an existing IPA deployment.
|
||||||
required: false
|
required: true
|
||||||
realm:
|
realm:
|
||||||
description: The Kerberos realm of an existing IPA deployment.
|
description: The Kerberos realm of an existing IPA deployment.
|
||||||
required: true
|
required: true
|
||||||
@@ -50,27 +51,42 @@ options:
|
|||||||
services:
|
services:
|
||||||
description: The services that should be enabled in the ssd configuration.
|
description: The services that should be enabled in the ssd configuration.
|
||||||
required: true
|
required: true
|
||||||
|
type: list
|
||||||
krb5_offline_passwords:
|
krb5_offline_passwords:
|
||||||
description: Whether user passwords are stored when the server is offline.
|
description: Whether user passwords are stored when the server is offline.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
on_master:
|
on_master:
|
||||||
description: Whether the configuration is done on the maseter or not.
|
description: Whether the configuration is done on the master or not.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
primary:
|
primary:
|
||||||
description: Whether to use fixed server as primary IPA server.
|
description: Whether to use fixed server as primary IPA server.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
preserve_sssd:
|
preserve_sssd:
|
||||||
description: Preserve old SSSD configuration if possible.
|
description: Preserve old SSSD configuration if possible.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
permit:
|
permit:
|
||||||
description: Disable access rules by default, permit all access.
|
description: Disable access rules by default, permit all access.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
dns_updates:
|
dns_updates:
|
||||||
description: Configures the machine to attempt dns updates when the ip address changes.
|
description: Configures the machine to attempt dns updates when the ip address changes.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
all_ip_addresses:
|
all_ip_addresses:
|
||||||
description: All routable IP addresses configured on any interface will be added to DNS.
|
description: All routable IP addresses configured on any interface will be added to DNS.
|
||||||
required: false
|
required: false
|
||||||
|
type: bool
|
||||||
|
default: no
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
'''
|
'''
|
||||||
|
|||||||
@@ -39,6 +39,7 @@ options:
|
|||||||
servers:
|
servers:
|
||||||
description: The FQDN of the IPA servers to connect to.
|
description: The FQDN of the IPA servers to connect to.
|
||||||
required: true
|
required: true
|
||||||
|
type: list
|
||||||
domain:
|
domain:
|
||||||
description: The primary DNS domain of an existing IPA deployment.
|
description: The primary DNS domain of an existing IPA deployment.
|
||||||
required: true
|
required: true
|
||||||
@@ -54,6 +55,7 @@ options:
|
|||||||
kinit_attempts:
|
kinit_attempts:
|
||||||
description: Repeat the request for host Kerberos ticket X times.
|
description: Repeat the request for host Kerberos ticket X times.
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
default: 5
|
default: 5
|
||||||
author:
|
author:
|
||||||
- Thomas Woerner
|
- Thomas Woerner
|
||||||
|
|||||||
Reference in New Issue
Block a user