internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-07-31 20:04:45 +00:00
Code Issues Projects Releases Wiki Activity

library/ipajoin.py: Fail for already joined hosts if krb5.keytab is missing

Browse Source 
It is not possible to restore a missing krb5.keytab using the admin
credential. Therefore the only way is to fail in this case.
This commit is contained in:
Thomas Woerner
2017-09-21 12:16:02 +02:00
parent 375500df37
commit 860794232e
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
library/ipajoin.py
View File

@@ -332,6 +332,10 @@ def main():
changed = True changed = True
module.log("Enrolled in IPA realm %s" % realm) module.log("Enrolled in IPA realm %s" % realm)
# Fix missing krb5.keytab file for already joined host
if already_joined and not os.path.exists(paths.KRB5_KEYTAB):
module.fail_json(msg="krb5.keytab missing! Retry with ipaclient_force_join=yes to generate a new one.")
start = stderr.find('Certificate subject base is: ') start = stderr.find('Certificate subject base is: ')
if start >= 0: if start >= 0:
start = start + 29 start = start + 29