mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-07-31 11:54:47 +00:00
Add verification of IPA version for ipagroup's membermanager.
The ipagroup attribute `membermanager` requires the use of IPA version 4.8.4 or later. This change ensure that the tests are executed only if a required version is found.
This commit is contained in:
@@ -5,199 +5,205 @@
|
|||||||
gather_facts: false
|
gather_facts: false
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Ensure user manangeruser1 and manageruser2 is absent
|
- include_tasks: ../env_freeipa_facts.yml
|
||||||
ipauser:
|
|
||||||
ipaadmin_password: SomeADMINpassword
|
|
||||||
name: manageruser1,manageruser2,unknown_user
|
|
||||||
state: absent
|
|
||||||
|
|
||||||
- name: Ensure group testgroup, managergroup1 and managergroup2 are absent
|
- name: Tests requiring IPA version 4.8.4+
|
||||||
ipagroup:
|
block:
|
||||||
ipaadmin_password: SomeADMINpassword
|
- name: Ensure user manangeruser1 and manageruser2 is absent
|
||||||
name: testgroup,managergroup1,managergroup2
|
ipauser:
|
||||||
state: absent
|
ipaadmin_password: SomeADMINpassword
|
||||||
|
name: manageruser1,manageruser2,unknown_user
|
||||||
|
state: absent
|
||||||
|
|
||||||
- name: Ensure user manageruser1 and manageruser2 are present
|
- name: Ensure group testgroup, managergroup1 and managergroup2 are absent
|
||||||
ipauser:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
users:
|
name: testgroup,managergroup1,managergroup2
|
||||||
- name: manageruser1
|
state: absent
|
||||||
first: manageruser1
|
|
||||||
last: Last1
|
|
||||||
- name: manageruser2
|
|
||||||
first: manageruser2
|
|
||||||
last: Last2
|
|
||||||
register: result
|
|
||||||
failed_when: not result.changed
|
|
||||||
|
|
||||||
- name: Ensure testgroup is present
|
- name: Ensure user manageruser1 and manageruser2 are present
|
||||||
ipagroup:
|
ipauser:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
users:
|
||||||
register: result
|
- name: manageruser1
|
||||||
failed_when: not result.changed
|
first: manageruser1
|
||||||
|
last: Last1
|
||||||
|
- name: manageruser2
|
||||||
|
first: manageruser2
|
||||||
|
last: Last2
|
||||||
|
register: result
|
||||||
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure managergroup1 is present
|
- name: Ensure testgroup is present
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: managergroup1
|
name: testgroup
|
||||||
register: result
|
register: result
|
||||||
failed_when: not result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure managergroup2 is present
|
- name: Ensure managergroup1 is present
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: managergroup2
|
name: managergroup1
|
||||||
register: result
|
register: result
|
||||||
failed_when: not result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user1 is present for testgroup
|
- name: Ensure managergroup2 is present
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: managergroup2
|
||||||
membermanager_user: manageruser1
|
register: result
|
||||||
register: result
|
failed_when: not result.changed
|
||||||
failed_when: not result.changed
|
|
||||||
|
|
||||||
- name: Ensure membermanager user1 is present for testgroup again
|
- name: Ensure membermanager user1 is present for testgroup
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1
|
membermanager_user: manageruser1
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager group1 is present for testgroup
|
- name: Ensure membermanager user1 is present for testgroup again
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_group: managergroup1
|
membermanager_user: manageruser1
|
||||||
register: result
|
register: result
|
||||||
failed_when: not result.changed
|
failed_when: result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager group1 is present for testgroup again
|
- name: Ensure membermanager group1 is present for testgroup
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_group: managergroup1
|
membermanager_group: managergroup1
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user2 and group2 members are present for testgroup
|
- name: Ensure membermanager group1 is present for testgroup again
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser2
|
membermanager_group: managergroup1
|
||||||
membermanager_group: managergroup2
|
register: result
|
||||||
action: member
|
failed_when: result.changed
|
||||||
register: result
|
|
||||||
failed_when: not result.changed
|
|
||||||
|
|
||||||
- name: Ensure membermanager user2 and group2 members are present for testgroup again
|
- name: Ensure membermanager user2 and group2 members are present for testgroup
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser2
|
membermanager_user: manageruser2
|
||||||
membermanager_group: managergroup2
|
membermanager_group: managergroup2
|
||||||
action: member
|
action: member
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user and group members are present for testgroup again
|
- name: Ensure membermanager user2 and group2 members are present for testgroup again
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1,manageruser2
|
membermanager_user: manageruser2
|
||||||
membermanager_group: managergroup1,managergroup2
|
membermanager_group: managergroup2
|
||||||
action: member
|
action: member
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user1 and group1 members are absent for testgroup
|
- name: Ensure membermanager user and group members are present for testgroup again
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1
|
membermanager_user: manageruser1,manageruser2
|
||||||
membermanager_group: managergroup1
|
membermanager_group: managergroup1,managergroup2
|
||||||
action: member
|
action: member
|
||||||
state: absent
|
register: result
|
||||||
register: result
|
failed_when: result.changed
|
||||||
failed_when: not result.changed
|
|
||||||
|
|
||||||
- name: Ensure membermanager user1 and group1 members are absent for testgroup again
|
- name: Ensure membermanager user1 and group1 members are absent for testgroup
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1
|
membermanager_user: manageruser1
|
||||||
membermanager_group: managergroup1
|
membermanager_group: managergroup1
|
||||||
action: member
|
action: member
|
||||||
state: absent
|
state: absent
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user1 and group1 members are present for testgroup
|
- name: Ensure membermanager user1 and group1 members are absent for testgroup again
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1
|
membermanager_user: manageruser1
|
||||||
membermanager_group: managergroup1
|
membermanager_group: managergroup1
|
||||||
action: member
|
action: member
|
||||||
register: result
|
state: absent
|
||||||
failed_when: not result.changed
|
register: result
|
||||||
|
failed_when: result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user1 and group1 members are present for testgroup again
|
- name: Ensure membermanager user1 and group1 members are present for testgroup
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1
|
membermanager_user: manageruser1
|
||||||
membermanager_group: managergroup1
|
membermanager_group: managergroup1
|
||||||
action: member
|
action: member
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure membermanager user and group members are absent for testgroup
|
- name: Ensure membermanager user1 and group1 members are present for testgroup again
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1,manageruser2
|
membermanager_user: manageruser1
|
||||||
membermanager_group: managergroup1,managergroup2
|
membermanager_group: managergroup1
|
||||||
action: member
|
action: member
|
||||||
state: absent
|
register: result
|
||||||
register: result
|
failed_when: result.changed
|
||||||
failed_when: not result.changed
|
|
||||||
|
|
||||||
- name: Ensure membermanager user and group members are absent for testgroup again
|
- name: Ensure membermanager user and group members are absent for testgroup
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: testgroup
|
||||||
membermanager_user: manageruser1,manageruser2
|
membermanager_user: manageruser1,manageruser2
|
||||||
membermanager_group: managergroup1,managergroup2
|
membermanager_group: managergroup1,managergroup2
|
||||||
action: member
|
action: member
|
||||||
state: absent
|
state: absent
|
||||||
register: result
|
register: result
|
||||||
failed_when: result.changed
|
failed_when: not result.changed
|
||||||
|
|
||||||
- name: Ensure user manangeruser1 and manageruser2 is absent
|
- name: Ensure membermanager user and group members are absent for testgroup again
|
||||||
ipauser:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: manageruser1,manageruser2
|
name: testgroup
|
||||||
state: absent
|
membermanager_user: manageruser1,manageruser2
|
||||||
register: result
|
membermanager_group: managergroup1,managergroup2
|
||||||
failed_when: not result.changed
|
action: member
|
||||||
|
state: absent
|
||||||
|
register: result
|
||||||
|
failed_when: result.changed
|
||||||
|
|
||||||
- name: Ensure unknown membermanager_user member failure
|
- name: Ensure user manangeruser1 and manageruser2 is absent
|
||||||
ipagroup:
|
ipauser:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup
|
name: manageruser1,manageruser2
|
||||||
membermanager_user: unknown_user
|
state: absent
|
||||||
action: member
|
register: result
|
||||||
register: result
|
failed_when: not result.changed
|
||||||
failed_when: result.changed or "no such entry" not in result.msg
|
|
||||||
|
|
||||||
- name: Ensure group testgroup, managergroup1 and managergroup2 are absent
|
- name: Ensure unknown membermanager_user member failure
|
||||||
ipagroup:
|
ipagroup:
|
||||||
ipaadmin_password: SomeADMINpassword
|
ipaadmin_password: SomeADMINpassword
|
||||||
name: testgroup,managergroup1,managergroup2
|
name: testgroup
|
||||||
state: absent
|
membermanager_user: unknown_user
|
||||||
register: result
|
action: member
|
||||||
failed_when: not result.changed
|
register: result
|
||||||
|
failed_when: result.changed or "no such entry" not in result.msg
|
||||||
|
|
||||||
|
- name: Ensure group testgroup, managergroup1 and managergroup2 are absent
|
||||||
|
ipagroup:
|
||||||
|
ipaadmin_password: SomeADMINpassword
|
||||||
|
name: testgroup,managergroup1,managergroup2
|
||||||
|
state: absent
|
||||||
|
register: result
|
||||||
|
failed_when: not result.changed
|
||||||
|
|
||||||
|
when: ipa_version is version('4.8.4', '>=')
|
||||||
|
|||||||
Reference in New Issue
Block a user