mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
72b4b89116
Use Fully Qualified Collection Name (FQCN) for ansible builtins. This is ansible.builtin.set_fact instead of set_fact for example and aplies for all actions that are part of ansible.builtin. All the replaced ansible.builtins: assert, command, copy, debug, fail, fetch, file, import_playbook, import_tasks, include_role, include_tasks, include_vars, package, set_fact, shell, slurp, stat, systemd
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
---
|
|
- name: Ensure DNS forward zone to Windows AD
|
|
ipadnsforwardzone:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: "{{ adserver.domain }}"
|
|
forwarders:
|
|
- ip_address: "{{ adserver.ip_address }}"
|
|
forwardpolicy: first
|
|
register: trust_dnszone
|
|
|
|
- name: Set trust to Widows AD
|
|
ipatrust:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
realm: "{{ adserver.domain }}"
|
|
admin: Administrator
|
|
password: "{{ adserver.password }}"
|
|
base_id: "{{ trust_base_id | default(omit) }}"
|
|
range_type: "{{ trust_range_type | default(omit) }}"
|
|
range_size: "{{ trust_range_size | default(omit) }}"
|
|
register: result
|
|
failed_when: result.failed
|
|
|
|
- name: Retrieve Domain Security Identifier
|
|
ansible.builtin.shell:
|
|
cmd: |
|
|
kinit -c test_krb5_cache admin <<< SomeADMINpassword > /dev/null
|
|
KRB5CCNAME=test_krb5_cache ipa trust-show {{ adserver.domain }} | sed -n "/Domain Security Identifier/s/ //gp" | cut -d":" -f2
|
|
kdestroy -c test_krb5_cache -A -q > /dev/null
|
|
register: getsid
|
|
no_log: yes
|
|
|
|
- name: Set ipa_domain_sid.
|
|
ansible.builtin.set_fact:
|
|
ipa_domain_sid: "{{ getsid.stdout }}"
|