2675 Commits

Author SHA1 Message Date
Thomas Woerner
5198eb5304 roles/ipaclient/tasks/install.yml: Use new roles and modules
The sssd role has been deactivated in favor of the new sssd module, because the module is able to adapt an existing configuration.
2017-08-30 14:45:01 +02:00
Thomas Woerner
cd2d7511b0 New module to configure IPA extras like NTP, SSH, firefox and NIS 2017-08-30 14:42:44 +02:00
Thomas Woerner
403c28b46b New module to cteate IPA NSS database 2017-08-30 14:41:25 +02:00
Thomas Woerner
e66c936622 New module to create temporary NSS database, call IPA API for remaining enrollment parts 2017-08-30 14:38:52 +02:00
Thomas Woerner
09d15b511b New module to configure sssd using SSSDConfig
The advantage of the use of SSSDConfig is that an existing configuration could be changed and not simply overwritten.
2017-08-30 14:36:49 +02:00
Thomas Woerner
d10d078a42 New role to configure ipa default.conf 2017-08-30 14:35:39 +02:00
Thomas Woerner
5f17e9a778 roles/krb5: New krb5_no_default_domain setting 2017-08-30 14:31:05 +02:00
Thomas Woerner
e65ba14e52 roles/sssd: Fixed several small defects, added libselinux-python to sssd_packages 2017-08-30 14:28:34 +02:00
Thomas Woerner
a484e5b2d2 roles/ipaclient/defaults/main.yml: ipaclient_ntp should default to no 2017-08-30 14:27:31 +02:00
Thomas Woerner
5724212b58 library/ipajoin.py: New documentation, debug flag, added missing kdestroy call 2017-08-30 14:25:32 +02:00
Thomas Woerner
edd590cad9 library/ipadiscovery.py: New documentation, conflict check from ipaclient.py
New documentation for incoming and outgoing arguments. Copied check from
library/ipaclient.py to do conflict checks if the check argument is set.
2017-08-30 14:22:33 +02:00
Thomas Woerner
5cfcccd616 library/ipajoin.py: Doc updates, renamed ca_certs_file
Documentation for domain, principal, keytab, ca_cert_file and kinit_attempts
has been added.

ca_certs_file has been renamed to ca_cert_file as it is used in
ipa-client-install.
2017-08-24 12:54:37 +02:00
Thomas Woerner
18cc39dd30 roles/ipaclient/tasks/install.yml: Test code for krb5 and sssd 2017-08-24 12:39:01 +02:00
Thomas Woerner
bd8e23f211 New role for krb5 2017-08-24 12:38:15 +02:00
Thomas Woerner
3ae2a51c08 New sssd role 2017-08-24 12:36:51 +02:00
Thomas Woerner
44e4ee7459 library/ipajoin.py: New module for ipajoin
The module is doing the important part of the code in ipa-client-install
to be able to use ipa-join on the client. get_ca_certs* from client.py are
used as a temporary solution.
2017-08-24 12:33:23 +02:00
Thomas Woerner
4dea948fda roles/ipaclient/tasks/install.yml: Install IPA client early
IPA client imports are needed for discovery
2017-08-24 12:20:54 +02:00
Thomas Woerner
0246ad0079 roles/ipaclient/defaults/main.yml: Remove unused ipaclient_servers 2017-08-24 12:19:51 +02:00
Thomas Woerner
dc9bb51a1a library/ipadiscovery.py: Renamed server to servers output argument 2017-08-24 12:17:21 +02:00
Thomas Woerner
07a15c56e8 library/ipadiscovery.py: New module for ipa discovery
The module is doing the same discovery that ipa-client-install is doing
internally. The results are saved into a structure named ipadiscovery for
the ansible module.

The discovery module is needed to be able to not depend on the definition
of the ipaservers group for example to get otp passwords, to be able to
join and to configure sssd and other services corretly.
2017-08-23 20:40:46 +02:00
Thomas Woerner
97be0612fb library/ipaclient.py: servers needs to be a list
More than one server could be specified
2017-08-23 20:38:51 +02:00
Thomas Woerner
95c38d169d New ipaclient options: force_join, kinit_attempts, ntp and mkhomedir 2017-08-18 10:02:01 +02:00
Thomas Woerner
9ad38c668d library/ipaclient.py: Fix white spaces 2017-08-18 09:59:51 +02:00
Florence Blanc-Renaud
38d7223376 Modify ipahost module: the authentication is done locally on the controller
node and the credential cache is copied to the managed node

ipahost module is also using facts gathered from the server to find the
domain and realm.
2017-08-10 16:54:44 +02:00
Florence Blanc-Renaud
09f45e4acd Ansible for IPA 2017-07-03 09:55:23 +02:00