mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-07-31 11:54:47 +00:00
roles/ipaclient/tasks/install.yml: Use ipaadmin_keytab for admin keytab
The use od ipaclient_keytab for ipahost is not correct as the admin keytab needs to be used here.
This commit is contained in:
@@ -70,6 +70,9 @@ Variables
|
|||||||
**ipaservers** - Group of IPA server hostnames.
|
**ipaservers** - Group of IPA server hostnames.
|
||||||
(list of strings, optional)
|
(list of strings, optional)
|
||||||
|
|
||||||
|
**ipaadmin_keytab** - The path to the admin keytab used for alternative authentication.
|
||||||
|
(string, optional)
|
||||||
|
|
||||||
**ipaclient_domain** - The primary DNS domain of an existing IPA deployment.
|
**ipaclient_domain** - The primary DNS domain of an existing IPA deployment.
|
||||||
(string, optional)
|
(string, optional)
|
||||||
|
|
||||||
|
|||||||
@@ -33,7 +33,7 @@
|
|||||||
state: present
|
state: present
|
||||||
principal: "{{ ipaclient_principal | default('admin') }}"
|
principal: "{{ ipaclient_principal | default('admin') }}"
|
||||||
password: "{{ ipaclient_password | default(omit) }}"
|
password: "{{ ipaclient_password | default(omit) }}"
|
||||||
keytab: "{{ ipaclient_keytab | default(omit) }}"
|
keytab: "{{ ipaadmin_keytab | default(omit) }}"
|
||||||
fqdn: "{{ ansible_fqdn }}"
|
fqdn: "{{ ansible_fqdn }}"
|
||||||
lifetime: "{{ ipaclient_lifetime | default(omit) }}"
|
lifetime: "{{ ipaclient_lifetime | default(omit) }}"
|
||||||
random: True
|
random: True
|
||||||
|
|||||||
Reference in New Issue
Block a user