mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-05-07 22:03:18 +00:00
c7db187801
This patch add support for adding external members to ipagroup which have the `external` attribute set. It adds another attribute to the module, `external_members`, which is a list of users or groups from an external trust, to be added to the group. This patch requires server-trust-ad to be tested, as such, the tests have been guarded by a test block, for when such tests are available in ansible-freeipa CI. Fixes issue #418
114 lines
3.0 KiB
YAML
114 lines
3.0 KiB
YAML
---
|
|
- name: find trust
|
|
hosts: ipaserver
|
|
become: true
|
|
gather_facts: false
|
|
|
|
tasks:
|
|
|
|
- include_tasks: ../env_freeipa_facts.yml
|
|
|
|
- block:
|
|
|
|
- name: Add nonposix group.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Set group to be external
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add AD users to group
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external_member: "AD\\Domain Users"
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add AD users to group, again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external_member: "AD\\Domain Users"
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Remove external group
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
state: absent
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add nonposix, external group, with AD users.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
nonposix: yes
|
|
external: yes
|
|
external_member: "AD\\Domain Users"
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add nonposix, external group, with AD users, again.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
nonposix: yes
|
|
external: yes
|
|
external_member: "AD\\Domain Users"
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Remove group
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
state: absent
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Add nonposix group.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
nonposix: yes
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Set group to be external, and add users.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external: yes
|
|
external_member: "AD\\Domain Users"
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Set group to be external, and add users, again.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
external: yes
|
|
external_member: "AD\\Domain Users"
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Cleanup environment.
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: extgroup
|
|
state: absent
|
|
|
|
when: trust_test_is_supported | default(false)
|