mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
1c17f426ac
The configuration of the DNS resolver is useful if the IPA server has internal DNS support. The installation of packages is happening before the DNS resolver is configured, therefore package installation needs to be possible without the configuration of the DNS resolver. The DNS nameservers are configured for `NetworkManager`, `systemd-resolved` (if installed and enabled) and `/etc/resolv.conf` if neither NetworkManager nor systemd-resolved is used. Example inventory: [ipaserver] ipaserver.example.com [ipaclients] ipaclient1.example.com [ipaclients:vars] ipaadmin_principal=admin ipaadmin_password=MySecretPassword123 ipaclient_domain=example.com ipaclient_configure_dns_resolver=yes ipaclient_dns_servers=192.168.100.1 ipaclient_cleanup_dns_resolver=yes New parameters: ipaclient_configure_dns_resolver The bool value defines if the DNS resolver is configured. before deploying the client. This is useful if the IPA server has internal DNS support. ipaclient_dns_server need to be set also. ipaclient_dns_servers The list of DNS server IP addresses. This is only useful with ipaclient_configure_dns_resolver. ipaclient_cleanup_dns_resolver The bool value defines if DNS resolvers that have been configured before with ipaclient_configure_dns_resolver will be cleaned up again. New module: roles/ipaclient/library/ipaclient_configure_dns_resolver.py Fixes: #902 (Consider adding support for client DNS resolver configuration)
23 lines
581 B
YAML
23 lines
581 B
YAML
---
|
|
# tasks to uninstall IPA client
|
|
|
|
- name: Uninstall - Uninstall IPA client
|
|
command: >
|
|
/usr/sbin/ipa-client-install
|
|
--uninstall
|
|
-U
|
|
register: uninstall
|
|
# 2 means that uninstall failed because IPA client was not configured
|
|
failed_when: uninstall.rc != 0 and uninstall.rc != 2
|
|
changed_when: uninstall.rc == 0
|
|
|
|
- name: Uninstall - Unconfigure DNS resolver
|
|
ipaclient_configure_dns_resolver:
|
|
state: absent
|
|
when: ipaclient_cleanup_dns_resolver | bool
|
|
|
|
#- name: Remove IPA client package
|
|
# package:
|
|
# name: "{{ ipaclient_packages }}"
|
|
# state: absent
|