From c7a3b26ec4ee99e5485cdfa8b078ef89e19c9a56 Mon Sep 17 00:00:00 2001
From: Rafael Guterres Jeffman <rjeffman@redhat.com>
Date: Fri, 3 Sep 2021 23:41:12 -0300
Subject: [PATCH 1/2] Ubuntu 18.04: Fix role instalation for Ubuntu Bionic
 Beaver.

Ubuntu Bionic Beaver must use python2 as Python interpreter due to
the way python-ipalib package is defined.

Before using the role for installation, one  must install package
python2.7 before executing this role.

Based on the work by Manuel Laurent (@mlaurent205 on Github).
---
 roles/ipabackup/vars/Ubuntu-18.04.yml  | 9 +++++++++
 roles/ipaclient/vars/Ubuntu-18.04.yml  | 6 ++++++
 roles/ipareplica/vars/Ubuntu-18.04.yml | 9 +++++++++
 roles/ipaserver/vars/Ubuntu-18.04.yml  | 9 +++++++++
 4 files changed, 33 insertions(+)
 create mode 100644 roles/ipabackup/vars/Ubuntu-18.04.yml
 create mode 100644 roles/ipaclient/vars/Ubuntu-18.04.yml
 create mode 100644 roles/ipareplica/vars/Ubuntu-18.04.yml
 create mode 100644 roles/ipaserver/vars/Ubuntu-18.04.yml

diff --git a/roles/ipabackup/vars/Ubuntu-18.04.yml b/roles/ipabackup/vars/Ubuntu-18.04.yml
new file mode 100644
index 00000000..3dddac75
--- /dev/null
+++ b/roles/ipabackup/vars/Ubuntu-18.04.yml
@@ -0,0 +1,9 @@
+# vars/Ubuntu.yml
+ipaserver_packages: [ "freeipa-server" ]
+ipaserver_packages_dns: [ "freeipa-server-dns" ]
+ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ]
+ipaserver_packages_firewalld: [ "firewalld" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'
diff --git a/roles/ipaclient/vars/Ubuntu-18.04.yml b/roles/ipaclient/vars/Ubuntu-18.04.yml
new file mode 100644
index 00000000..26c6fbbf
--- /dev/null
+++ b/roles/ipaclient/vars/Ubuntu-18.04.yml
@@ -0,0 +1,6 @@
+# vars/Ubuntu-18.04.yml
+ipaclient_packages: [ "freeipa-client" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'
diff --git a/roles/ipareplica/vars/Ubuntu-18.04.yml b/roles/ipareplica/vars/Ubuntu-18.04.yml
new file mode 100644
index 00000000..c21bfcd1
--- /dev/null
+++ b/roles/ipareplica/vars/Ubuntu-18.04.yml
@@ -0,0 +1,9 @@
+# vars/Ubuntu.yml
+ipareplica_packages: [ "freeipa-server" ]
+ipareplica_packages_dns: [ "freeipa-server-dns" ]
+ipareplica_packages_adtrust: [ "freeipa-server-trust-ad" ]
+ipareplica_packages_firewalld: [ "firewalld" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'
diff --git a/roles/ipaserver/vars/Ubuntu-18.04.yml b/roles/ipaserver/vars/Ubuntu-18.04.yml
new file mode 100644
index 00000000..3dddac75
--- /dev/null
+++ b/roles/ipaserver/vars/Ubuntu-18.04.yml
@@ -0,0 +1,9 @@
+# vars/Ubuntu.yml
+ipaserver_packages: [ "freeipa-server" ]
+ipaserver_packages_dns: [ "freeipa-server-dns" ]
+ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ]
+ipaserver_packages_firewalld: [ "firewalld" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'

From 44b3c3003d1a115a00cefd8f8bd46da4466bf09b Mon Sep 17 00:00:00 2001
From: Rafael Guterres Jeffman <rjeffman@redhat.com>
Date: Mon, 29 Nov 2021 16:17:44 -0300
Subject: [PATCH 2/2] Debian Buster: Fix "No module named 'ipapython'".

When using ipaclient role under Debian 10 (Buster), it is required
that the python interpreter is set to Python 2.7 as freeipa-client
package pulls in Python 2.7 dependencies, and does not work with
Python 3.

This patch adds configuration to properly set python interpreter.

Based on the work by Marc Richter (@The-Judge on Github).

Fix issue #607.
---
 roles/ipaclient/vars/Debian-10.yml | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 roles/ipaclient/vars/Debian-10.yml

diff --git a/roles/ipaclient/vars/Debian-10.yml b/roles/ipaclient/vars/Debian-10.yml
new file mode 100644
index 00000000..8de5dc8e
--- /dev/null
+++ b/roles/ipaclient/vars/Debian-10.yml
@@ -0,0 +1,7 @@
+---
+# vars/Debian.yml
+ipaclient_packages: [ "freeipa-client" ]
+# Debian Buster must use python2 as Python interpreter due
+# to the way freeipa-client package is defined.
+# You must install package python2.7 before executing this role.
+ansible_python_interpreter: '/usr/bin/python2'