mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
397acc01db
krb5 DNS discovery was not possible in cluster environments as the server list from groups.ipaserver was used all the time. DNS discovery is though only used if no servers are given. The new setting ipaclient_no_dns_lookup has been added to make sure that DNS lookup is used in the first place and can be disabled easily with this setting. There is also a new way to override servers per client in the inventory file with ipaclient_servers. Two new settings have been added: ipaclient_no_dns_lookup (bool, default: no) Set to 'yes' to use groups.ipaserver in cluster environments as servers for the clients. This deactivates DNS lookup in krb5. ipaclient_servers (list of strings, default: undefined) Manually override list of servers for example in a cluster environment on a per client basis. The list of servers is normally taken from from groups.ipaserver in cluster environments.
FreeIPA Ansible roles
This repository contains Ansible roles and playbooks to install and uninstall FreeIPA servers and clients. A role for replica is in the work, but not functional so far.
Note: The ansible playbooks and roles require a configured ansible environment where the ansible nodes are reachanble and are properly set up to have an IP address and a working package manager.
Supported FreeIPA versions
For now only FreeIPA versions 4.5 and up are supported. The client role should also be functional with FreeIPA 4.4.