mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-07-31 03:44:41 +00:00
ipaconfig: Fix documentation sections and agument spec
ansible-test with ansible-2.14 is adding a lot of new tests to ensure that the documentation section and the agument spec is complete. Needed changes: DOCUMENTATION section - `module` tag needs to be correct - `type: str` needs to be set for string parameters - `type: int` needs to be set for integer parameters - `type: list` needs to be set for list parameters - `type: string` is not valid and needs to be replaced by `type: str` - `elements: str` needs to be given for list of string parameters - `authors` needs to be given with the github user also: `Name (@user)` RETURN section - `contains` needs to be used instead of `options` for dicts - `type: str` needs to be set for string parameters - `type: int` needs to be set for integer parameters - `type: list` needs to be set for list parameters - `elements: str` needs to be given for list of string parameters - `description` needs to be correct argument_spec - `elements="str"` needs to be added to all list of string parameters The `copyright` date is extended with `-2022`.
This commit is contained in:
@@ -2,8 +2,9 @@
|
|||||||
|
|
||||||
# Authors:
|
# Authors:
|
||||||
# Chris Procter <cprocter@redhat.com>
|
# Chris Procter <cprocter@redhat.com>
|
||||||
|
# Thomas Woerner <twoerner@redhat.com>
|
||||||
#
|
#
|
||||||
# Copyright (C) 2020 Red Hat
|
# Copyright (C) 2020-2022 Red Hat
|
||||||
# see file 'COPYING' for use and warranty information
|
# see file 'COPYING' for use and warranty information
|
||||||
#
|
#
|
||||||
# This program is free software; you can redistribute it and/or modify
|
# This program is free software; you can redistribute it and/or modify
|
||||||
@@ -32,8 +33,10 @@ ANSIBLE_METADATA = {
|
|||||||
|
|
||||||
DOCUMENTATION = '''
|
DOCUMENTATION = '''
|
||||||
---
|
---
|
||||||
module: ipa_config
|
module: ipaconfig
|
||||||
author: chris procter
|
author:
|
||||||
|
- Chris Procter (@chr15p)
|
||||||
|
- Thomas Woerner (@t-woerner)
|
||||||
short_description: Modify IPA global config options
|
short_description: Modify IPA global config options
|
||||||
description:
|
description:
|
||||||
- Modify IPA global config options
|
- Modify IPA global config options
|
||||||
@@ -43,48 +46,60 @@ options:
|
|||||||
maxusername:
|
maxusername:
|
||||||
description: Set the maximum username length between 1-255
|
description: Set the maximum username length between 1-255
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
aliases: ['ipamaxusernamelength']
|
aliases: ['ipamaxusernamelength']
|
||||||
maxhostname:
|
maxhostname:
|
||||||
description: Set the maximum hostname length between 64-255
|
description: Set the maximum hostname length between 64-255
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
aliases: ['ipamaxhostnamelength']
|
aliases: ['ipamaxhostnamelength']
|
||||||
homedirectory:
|
homedirectory:
|
||||||
description: Set the default location of home directories
|
description: Set the default location of home directories
|
||||||
required: false
|
required: false
|
||||||
|
type: str
|
||||||
aliases: ['ipahomesrootdir']
|
aliases: ['ipahomesrootdir']
|
||||||
defaultshell:
|
defaultshell:
|
||||||
description: Set the default shell for new users
|
description: Set the default shell for new users
|
||||||
required: false
|
required: false
|
||||||
|
type: str
|
||||||
aliases: ['ipadefaultloginshell', 'loginshell']
|
aliases: ['ipadefaultloginshell', 'loginshell']
|
||||||
defaultgroup:
|
defaultgroup:
|
||||||
description: Set the default group for new users
|
description: Set the default group for new users
|
||||||
required: false
|
required: false
|
||||||
|
type: str
|
||||||
aliases: ['ipadefaultprimarygroup']
|
aliases: ['ipadefaultprimarygroup']
|
||||||
emaildomain:
|
emaildomain:
|
||||||
description: Set the default e-mail domain
|
description: Set the default e-mail domain
|
||||||
required: false
|
required: false
|
||||||
|
type: str
|
||||||
aliases: ['ipadefaultemaildomain']
|
aliases: ['ipadefaultemaildomain']
|
||||||
searchtimelimit:
|
searchtimelimit:
|
||||||
description:
|
description:
|
||||||
- Set maximum amount of time (seconds) for a search
|
- Set maximum amount of time (seconds) for a search
|
||||||
- values -1 to 2147483647 (-1 or 0 is unlimited)
|
- values -1 to 2147483647 (-1 or 0 is unlimited)
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
aliases: ['ipasearchtimelimit']
|
aliases: ['ipasearchtimelimit']
|
||||||
searchrecordslimit:
|
searchrecordslimit:
|
||||||
description:
|
description:
|
||||||
- Set maximum number of records to search
|
- Set maximum number of records to search
|
||||||
- values -1 to 2147483647 (-1 or 0 is unlimited)
|
- values -1 to 2147483647 (-1 or 0 is unlimited)
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
aliases: ['ipasearchrecordslimit']
|
aliases: ['ipasearchrecordslimit']
|
||||||
usersearch:
|
usersearch:
|
||||||
description:
|
description:
|
||||||
- Set comma-separated list of fields to search for user search
|
- Set comma-separated list of fields to search for user search
|
||||||
required: false
|
required: false
|
||||||
|
type: list
|
||||||
|
elements: str
|
||||||
aliases: ['ipausersearchfields']
|
aliases: ['ipausersearchfields']
|
||||||
groupsearch:
|
groupsearch:
|
||||||
description:
|
description:
|
||||||
- Set comma-separated list of fields to search for group search
|
- Set comma-separated list of fields to search for group search
|
||||||
required: false
|
required: false
|
||||||
|
type: list
|
||||||
|
elements: str
|
||||||
aliases: ['ipagroupsearchfields']
|
aliases: ['ipagroupsearchfields']
|
||||||
enable_migration:
|
enable_migration:
|
||||||
description: Enable migration mode
|
description: Enable migration mode
|
||||||
@@ -95,22 +110,26 @@ options:
|
|||||||
description: Set default group objectclasses (comma-separated list)
|
description: Set default group objectclasses (comma-separated list)
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
aliases: ['ipagroupobjectclasses']
|
aliases: ['ipagroupobjectclasses']
|
||||||
userobjectclasses:
|
userobjectclasses:
|
||||||
description: Set default user objectclasses (comma-separated list)
|
description: Set default user objectclasses (comma-separated list)
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
aliases: ['ipauserobjectclasses']
|
aliases: ['ipauserobjectclasses']
|
||||||
pwdexpnotify:
|
pwdexpnotify:
|
||||||
description:
|
description:
|
||||||
- Set number of days's notice of impending password expiration
|
- Set number of days's notice of impending password expiration
|
||||||
- values 0 to 2147483647
|
- values 0 to 2147483647
|
||||||
required: false
|
required: false
|
||||||
|
type: int
|
||||||
aliases: ['ipapwdexpadvnotify']
|
aliases: ['ipapwdexpadvnotify']
|
||||||
configstring:
|
configstring:
|
||||||
description: Set extra hashes to generate in password plug-in
|
description: Set extra hashes to generate in password plug-in
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
choices:
|
choices:
|
||||||
- "AllowNThash"
|
- "AllowNThash"
|
||||||
- "KDC:Disable Last Success"
|
- "KDC:Disable Last Success"
|
||||||
@@ -122,31 +141,36 @@ options:
|
|||||||
description: Set order in increasing priority of SELinux users
|
description: Set order in increasing priority of SELinux users
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
aliases: ['ipaselinuxusermaporder']
|
aliases: ['ipaselinuxusermaporder']
|
||||||
selinuxusermapdefault:
|
selinuxusermapdefault:
|
||||||
description: Set default SELinux user when no match found in map rule
|
description: Set default SELinux user when no match found in map rule
|
||||||
required: false
|
required: false
|
||||||
|
type: str
|
||||||
aliases: ['ipaselinuxusermapdefault']
|
aliases: ['ipaselinuxusermapdefault']
|
||||||
pac_type:
|
pac_type:
|
||||||
description: set default types of PAC supported for services
|
description: set default types of PAC supported for services
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
choices: ["MS-PAC", "PAD", "nfs:NONE", ""]
|
choices: ["MS-PAC", "PAD", "nfs:NONE", ""]
|
||||||
aliases: ["ipakrbauthzdata"]
|
aliases: ["ipakrbauthzdata"]
|
||||||
user_auth_type:
|
user_auth_type:
|
||||||
description: set default types of supported user authentication
|
description: set default types of supported user authentication
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
choices: ["password", "radius", "otp", "disabled", ""]
|
choices: ["password", "radius", "otp", "disabled", ""]
|
||||||
aliases: ["ipauserauthtype"]
|
aliases: ["ipauserauthtype"]
|
||||||
ca_renewal_master_server:
|
ca_renewal_master_server:
|
||||||
description: Renewal master for IPA certificate authority.
|
description: Renewal master for IPA certificate authority.
|
||||||
required: false
|
required: false
|
||||||
type: string
|
type: str
|
||||||
domain_resolution_order:
|
domain_resolution_order:
|
||||||
description: set list of domains used for short name qualification
|
description: set list of domains used for short name qualification
|
||||||
required: false
|
required: false
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
aliases: ["ipadomainresolutionorder"]
|
aliases: ["ipadomainresolutionorder"]
|
||||||
enable_sid:
|
enable_sid:
|
||||||
description: >
|
description: >
|
||||||
@@ -159,7 +183,7 @@ options:
|
|||||||
NetBIOS name of the IPA domain.
|
NetBIOS name of the IPA domain.
|
||||||
Requires IPA 4.9.8+ and 'enable_sid: yes'.
|
Requires IPA 4.9.8+ and 'enable_sid: yes'.
|
||||||
required: false
|
required: false
|
||||||
type: string
|
type: str
|
||||||
add_sids:
|
add_sids:
|
||||||
description: >
|
description: >
|
||||||
Add SIDs for existing users and groups.
|
Add SIDs for existing users and groups.
|
||||||
@@ -212,38 +236,48 @@ config:
|
|||||||
description: Dict of all global config options
|
description: Dict of all global config options
|
||||||
returned: When no options are set
|
returned: When no options are set
|
||||||
type: dict
|
type: dict
|
||||||
options:
|
contains:
|
||||||
maxusername:
|
maxusername:
|
||||||
description: maximum username length
|
description: maximum username length
|
||||||
|
type: int
|
||||||
returned: always
|
returned: always
|
||||||
maxhostname:
|
maxhostname:
|
||||||
description: maximum hostname length
|
description: maximum hostname length
|
||||||
|
type: int
|
||||||
returned: always
|
returned: always
|
||||||
homedirectory:
|
homedirectory:
|
||||||
description: default location of home directories
|
description: default location of home directories
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
defaultshell:
|
defaultshell:
|
||||||
description: default shell for new users
|
description: default shell for new users
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
defaultgroup:
|
defaultgroup:
|
||||||
description: default group for new users
|
description: default group for new users
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
emaildomain:
|
emaildomain:
|
||||||
description: default e-mail domain
|
description: default e-mail domain
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
searchtimelimit:
|
searchtimelimit:
|
||||||
description: maximum amount of time (seconds) for a search
|
description: maximum amount of time (seconds) for a search
|
||||||
|
type: int
|
||||||
returned: always
|
returned: always
|
||||||
searchrecordslimit:
|
searchrecordslimit:
|
||||||
description: maximum number of records to search
|
description: maximum number of records to search
|
||||||
|
type: int
|
||||||
returned: always
|
returned: always
|
||||||
usersearch:
|
usersearch:
|
||||||
description: comma-separated list of fields to search in user search
|
description: list of fields to search in user search
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
groupsearch:
|
groupsearch:
|
||||||
description: comma-separated list of fields to search in group search
|
description: list of fields to search in group search
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
enable_migration:
|
enable_migration:
|
||||||
description: Enable migration mode
|
description: Enable migration mode
|
||||||
@@ -252,44 +286,58 @@ config:
|
|||||||
groupobjectclasses:
|
groupobjectclasses:
|
||||||
description: default group objectclasses (comma-separated list)
|
description: default group objectclasses (comma-separated list)
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
userobjectclasses:
|
userobjectclasses:
|
||||||
description: default user objectclasses (comma-separated list)
|
description: default user objectclasses (comma-separated list)
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
pwdexpnotify:
|
pwdexpnotify:
|
||||||
description: number of days's notice of impending password expiration
|
description: number of days's notice of impending password expiration
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
configstring:
|
configstring:
|
||||||
description: extra hashes to generate in password plug-in
|
description: extra hashes to generate in password plug-in
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
selinuxusermaporder:
|
selinuxusermaporder:
|
||||||
description: order in increasing priority of SELinux users
|
description: order in increasing priority of SELinux users
|
||||||
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
selinuxusermapdefault:
|
selinuxusermapdefault:
|
||||||
description: default SELinux user when no match is found in map rule
|
description: default SELinux user when no match is found in map rule
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
pac_type:
|
pac_type:
|
||||||
description: default types of PAC supported for services
|
description: default types of PAC supported for services
|
||||||
type: list
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
user_auth_type:
|
user_auth_type:
|
||||||
description: default types of supported user authentication
|
description: default types of supported user authentication
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
ca_renewal_master_server:
|
ca_renewal_master_server:
|
||||||
description: master for IPA certificate authority.
|
description: master for IPA certificate authority.
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
domain_resolution_order:
|
domain_resolution_order:
|
||||||
description: list of domains used for short name qualification
|
description: list of domains used for short name qualification
|
||||||
|
type: list
|
||||||
|
elements: str
|
||||||
returned: always
|
returned: always
|
||||||
enable_sid:
|
enable_sid:
|
||||||
description: >
|
description: >
|
||||||
new users and groups automatically get a SID assigned.
|
new users and groups automatically get a SID assigned.
|
||||||
Requires IPA 4.9.8+.
|
Requires IPA 4.9.8+.
|
||||||
|
type: str
|
||||||
returned: always
|
returned: always
|
||||||
netbios_name:
|
netbios_name:
|
||||||
description: NetBIOS name of the IPA domain. Requires IPA 4.9.8+.
|
description: NetBIOS name of the IPA domain. Requires IPA 4.9.8+.
|
||||||
|
type: str
|
||||||
returned: if enable_sid is True
|
returned: if enable_sid is True
|
||||||
'''
|
'''
|
||||||
|
|
||||||
@@ -347,38 +395,41 @@ def main():
|
|||||||
aliases=['ipasearchtimelimit']),
|
aliases=['ipasearchtimelimit']),
|
||||||
searchrecordslimit=dict(type="int", required=False,
|
searchrecordslimit=dict(type="int", required=False,
|
||||||
aliases=['ipasearchrecordslimit']),
|
aliases=['ipasearchrecordslimit']),
|
||||||
usersearch=dict(type="list", required=False,
|
usersearch=dict(type="list", elements="str", required=False,
|
||||||
aliases=['ipausersearchfields']),
|
aliases=['ipausersearchfields']),
|
||||||
groupsearch=dict(type="list", required=False,
|
groupsearch=dict(type="list", elements="str", required=False,
|
||||||
aliases=['ipagroupsearchfields']),
|
aliases=['ipagroupsearchfields']),
|
||||||
enable_migration=dict(type="bool", required=False,
|
enable_migration=dict(type="bool", required=False,
|
||||||
aliases=['ipamigrationenabled']),
|
aliases=['ipamigrationenabled']),
|
||||||
groupobjectclasses=dict(type="list", required=False,
|
groupobjectclasses=dict(type="list", elements="str",
|
||||||
|
required=False,
|
||||||
aliases=['ipagroupobjectclasses']),
|
aliases=['ipagroupobjectclasses']),
|
||||||
userobjectclasses=dict(type="list", required=False,
|
userobjectclasses=dict(type="list", elements="str", required=False,
|
||||||
aliases=['ipauserobjectclasses']),
|
aliases=['ipauserobjectclasses']),
|
||||||
pwdexpnotify=dict(type="int", required=False,
|
pwdexpnotify=dict(type="int", required=False,
|
||||||
aliases=['ipapwdexpadvnotify']),
|
aliases=['ipapwdexpadvnotify']),
|
||||||
configstring=dict(type="list", required=False,
|
configstring=dict(type="list", elements="str", required=False,
|
||||||
aliases=['ipaconfigstring'],
|
aliases=['ipaconfigstring'],
|
||||||
choices=["AllowNThash",
|
choices=["AllowNThash",
|
||||||
"KDC:Disable Last Success",
|
"KDC:Disable Last Success",
|
||||||
"KDC:Disable Lockout",
|
"KDC:Disable Lockout",
|
||||||
"KDC:Disable Default Preauth for SPNs",
|
"KDC:Disable Default Preauth for SPNs",
|
||||||
""]), # noqa E128
|
""]), # noqa E128
|
||||||
selinuxusermaporder=dict(type="list", required=False,
|
selinuxusermaporder=dict(type="list", elements="str",
|
||||||
|
required=False,
|
||||||
aliases=['ipaselinuxusermaporder']),
|
aliases=['ipaselinuxusermaporder']),
|
||||||
selinuxusermapdefault=dict(type="str", required=False,
|
selinuxusermapdefault=dict(type="str", required=False,
|
||||||
aliases=['ipaselinuxusermapdefault']),
|
aliases=['ipaselinuxusermapdefault']),
|
||||||
pac_type=dict(type="list", required=False,
|
pac_type=dict(type="list", elements="str", required=False,
|
||||||
aliases=["ipakrbauthzdata"],
|
aliases=["ipakrbauthzdata"],
|
||||||
choices=["MS-PAC", "PAD", "nfs:NONE", ""]),
|
choices=["MS-PAC", "PAD", "nfs:NONE", ""]),
|
||||||
user_auth_type=dict(type="list", required=False,
|
user_auth_type=dict(type="list", elements="str", required=False,
|
||||||
choices=["password", "radius", "otp",
|
choices=["password", "radius", "otp",
|
||||||
"disabled", ""],
|
"disabled", ""],
|
||||||
aliases=["ipauserauthtype"]),
|
aliases=["ipauserauthtype"]),
|
||||||
ca_renewal_master_server=dict(type="str", required=False),
|
ca_renewal_master_server=dict(type="str", required=False),
|
||||||
domain_resolution_order=dict(type="list", required=False,
|
domain_resolution_order=dict(type="list", elements="str",
|
||||||
|
required=False,
|
||||||
aliases=["ipadomainresolutionorder"]),
|
aliases=["ipadomainresolutionorder"]),
|
||||||
enable_sid=dict(type="bool", required=False),
|
enable_sid=dict(type="bool", required=False),
|
||||||
add_sids=dict(type="bool", required=False),
|
add_sids=dict(type="bool", required=False),
|
||||||
|
|||||||
Reference in New Issue
Block a user