mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 02:35:54 +00:00
5057b3cfe0
The hidden replica support introduced some incompatible changes to replica deployment. The methods find_providing_server and find_providing_serves have been moved from ipaserver.install.service to ipaserver.masters. Additionally the host_name argument for find_providing_server is a list now. This breaks existing ipareplica Ansible modules ipareplica_prepare and ipareplica_enable_ipa.
43 lines
1.0 KiB
YAML
43 lines
1.0 KiB
YAML
---
|
|
# defaults file for ipareplica
|
|
|
|
### basic ###
|
|
ipareplica_no_host_dns: no
|
|
ipareplica_skip_conncheck: no
|
|
ipareplica_hidden_replica: no
|
|
### server ###
|
|
ipareplica_setup_adtrust: no
|
|
ipareplica_setup_ca: no
|
|
ipareplica_setup_kra: no
|
|
ipareplica_setup_dns: no
|
|
ipareplica_no_pkinit: no
|
|
ipareplica_no_ui_redirect: no
|
|
### client ###
|
|
ipaclient_mkhomedir: no
|
|
ipaclient_force_join: no
|
|
ipaclient_no_ntp: no
|
|
#ipaclient_ssh_trust_dns: no
|
|
#ipaclient_no_ssh: no
|
|
#ipaclient_no_sshd: no
|
|
#ipaclient_no_dns_sshfp: no
|
|
ipaclient_ssh_trust_dns: no
|
|
### certificate system ###
|
|
ipareplica_skip_schema_check: no
|
|
### dns ###
|
|
ipareplica_allow_zone_overlap: no
|
|
ipareplica_no_reverse: no
|
|
ipareplica_auto_reverse: no
|
|
ipareplica_no_forwarders: no
|
|
ipareplica_auto_forwarders: no
|
|
ipareplica_no_dnssec_validation: no
|
|
### ad trust ###
|
|
ipareplica_enable_compat: no
|
|
### uninstall ###
|
|
ipareplica_ignore_topology_disconnect: no
|
|
ipareplica_ignore_last_of_role: no
|
|
### additional ###
|
|
### packages ###
|
|
ipareplica_install_packages: yes
|
|
### firewalld ###
|
|
ipareplica_setup_firewalld: yes
|