internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-07-30 11:24:50 +00:00
Code Issues Projects Releases Wiki Activity

New ipaclient_allow_repair switch

Browse Source 
When allow_repair is enabled, then the playbook will continue for an
already joined host. The remaining steps ipaconf, ipasssd, krb5, ipaapi,
ipanss and ipaextras will be redone.

If allow_repair is disabled, then the meta module will be
used with the end_play option to stop the processing of the playbook
without an error.
This commit is contained in:
Thomas Woerner
2017-09-18 18:00:41 +02:00
parent 7ab7494ed2
commit ed91cc1d28
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/ipaclient/defaults/main.yml
View File

@@ -6,3 +6,4 @@ ipaclient_ntp: no
ipaclient_mkhomedir: no ipaclient_mkhomedir: no
ipaclient_kinit_attempts: 5 ipaclient_kinit_attempts: 5
ipaclient_use_otp: "false" ipaclient_use_otp: "false"
ipaclient_allow_repair: "false"

7
roles/ipaclient/tasks/install.yml
View File

@@ -100,6 +100,13 @@
register: ipajoin register: ipajoin
when: not ipatest.krb5_keytab_ok when: not ipatest.krb5_keytab_ok
- block:
- file:
path: "/etc/ipa/.dns_ccache"
state: absent
- meta: end_play
when: not ipaclient_allow_repair | bool and (ipatest.krb5_keytab_ok or ipajoin.already_joined)
- name: Install - Configure IPA default.conf - name: Install - Configure IPA default.conf
include_role: include_role:
name: ipaconf name: ipaconf