mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-11 03:05:54 +00:00
476d9d5057
New variables have been added to ipareplica and ipaserver role to enable the removal from the domein with the undeployment. `ipaserver_remove_from_domain` This enables the removal of the server from the domain additionally to the undeployment. `ipaserver_remove_on_server` The value defines the server/replica in the domain that will to be used to remove the server/replica from the domain if `ipaserver_ignore_topology_disconnect` and `ipaserver_remove_from_domain` are enabled. Without the need to enable `ipaserver_ignore_topology_disconnect`, the value will be automatically detected using the replication agreements of the server/replica. For the replica role it is possible to use the server variables, but also the replica versions: `ipareplica_remove_from_domain` and `ipareplica_remove_on_server`. The already existing parameters `ipaserver_ignore_topology_disconnect` and `ipaserver_ignore_last_of_role` have been added to the README files for server and replica with descriptions. The same for the replica versions of the parameters. The ipareplica role is not calling the `ipa-server-install` anymore, it is instead using (including) the server role for the task. The new module `ipaserver_get_connected_server` has been added to the server role to be able to get a connected server using the replication agreements. This module is only used if `ipaserver_ignore_topology_disconnect` is not needed.
46 lines
1.0 KiB
YAML
46 lines
1.0 KiB
YAML
---
|
|
# defaults file for ipaserver
|
|
|
|
### basic ###
|
|
ipaserver_no_host_dns: no
|
|
### server ###
|
|
ipaserver_setup_adtrust: no
|
|
ipaserver_setup_kra: no
|
|
ipaserver_setup_dns: no
|
|
ipaserver_no_hbac_allow: no
|
|
ipaserver_no_pkinit: no
|
|
ipaserver_no_ui_redirect: no
|
|
ipaserver_mem_check: yes
|
|
### ssl certificate ###
|
|
### client ###
|
|
ipaclient_mkhomedir: no
|
|
ipaclient_no_ntp: no
|
|
#ipaclient_ssh_trust_dns: no
|
|
#ipaclient_no_ssh: no
|
|
#ipaclient_no_sshd: no
|
|
#ipaclient_no_dns_sshfp: no
|
|
### certificate system ###
|
|
ipaserver_external_ca: no
|
|
### dns ###
|
|
ipaserver_allow_zone_overlap: no
|
|
ipaserver_no_reverse: no
|
|
ipaserver_auto_reverse: no
|
|
ipaserver_no_forwarders: no
|
|
ipaserver_auto_forwarders: no
|
|
ipaserver_no_dnssec_validation: no
|
|
### ad trust ###
|
|
ipaserver_enable_compat: no
|
|
ipaserver_setup_ca: yes
|
|
### packages ###
|
|
ipaserver_install_packages: yes
|
|
### firewalld ###
|
|
ipaserver_setup_firewalld: yes
|
|
|
|
### additional ###
|
|
ipaserver_copy_csr_to_controller: no
|
|
|
|
### uninstall ###
|
|
ipaserver_ignore_topology_disconnect: no
|
|
ipaserver_ignore_last_of_role: no
|
|
ipaserver_remove_from_domain: false
|