mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
38d7223376
node and the credential cache is copied to the managed node ipahost module is also using facts gathered from the server to find the domain and realm.
46 lines
1.8 KiB
YAML
46 lines
1.8 KiB
YAML
---
|
|
# tasks file for ipaclient
|
|
|
|
# The following block is executed when using OTP to enroll IPA client
|
|
# ie when neither ipaclient_password not ipaclient_keytab is set
|
|
# It connects to ipaserver and add the host with --random option in order
|
|
# to create a OneTime Password
|
|
- block:
|
|
- name: Install - Get a One-Time Password for client enrollment
|
|
ipahost:
|
|
state: present
|
|
principal: "{{ ipaserver_principal | default('admin') }}"
|
|
password: "{{ ipaserver_password | default(omit) }}"
|
|
keytab: "{{ ipaserver_keytab | default(omit) }}"
|
|
fqdn: "{{ ansible_fqdn }}"
|
|
lifetime: "{{ ipaserver_lifetime | default(omit) }}"
|
|
random: True
|
|
register: ipahost_output
|
|
# If the host is already enrolled, this command will exit on error
|
|
# The error can be ignored
|
|
failed_when: ipahost_output|failed and "Password cannot be set on enrolled host" not in ipahost_output.msg
|
|
delegate_to: "{{ groups.ipaservers[0] }}"
|
|
|
|
- name: Install - Store the previously obtained OTP
|
|
set_fact:
|
|
ipaclient_otp: "{{ipahost_output.host.randompassword if ipahost_output.host is defined else 'dummyotp' }}"
|
|
|
|
when: ipaclient_password is not defined and ipaclient_keytab is not defined
|
|
|
|
- name: Install - Install IPA client package
|
|
package:
|
|
name: "{{ ipaclient_package }}"
|
|
state: present
|
|
|
|
- name: Install - Configure IPA client
|
|
ipaclient:
|
|
state: present
|
|
domain: "{{ ipaclient_domain | default(omit) }}"
|
|
realm: "{{ ipaclient_realm | default(omit) }}"
|
|
server: "{{ ipaclient_server | default(omit) }}"
|
|
principal: "{{ ipaclient_principal | default(omit) }}"
|
|
password: "{{ ipaclient_password | default(omit) }}"
|
|
keytab: "{{ ipaclient_keytab | default(omit) }}"
|
|
otp: "{{ ipaclient_otp | default(omit) }}"
|
|
extra_args: "{{ ipaclient_extraargs | default(omit) }}"
|