mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 10:45:55 +00:00
45d8008033
This adds support for the --external-ca option to ipaserver. Lots of
additional tests and checks from ServerInstallInterface.__init__ have
been added to ipaserver_test. Also duplicate tests cna checks have been
removed.
Installer settings in ansible_ipa_server module_util are now also set
to the defaults that are used in Installable, ServerInstallInterface,
ServerMasterInstall, ADTrustInstallInterface and Uninstall.
The /root/ipa.csr file generated on the node in ca.install_step_0 will
be copied to the controller as "{{ inventory_hostname }}-ipa.csr".
The new task file copy_external_cert.yml has been added to copy the
generated certificate defined in ipaserver_external_cert_files to the node
to continue with ca.install_step_1.
The tasks/install.yml file has been adapted to make sure that the steps
that will be done in step two will be skipped after step one has been
done.
44 lines
994 B
YAML
44 lines
994 B
YAML
---
|
|
# defaults file for ipaserver
|
|
|
|
### basic ###
|
|
ipaserver_no_host_dns: no
|
|
### server ###
|
|
ipaserver_setup_adtrust: no
|
|
ipaserver_setup_kra: no
|
|
ipaserver_setup_dns: no
|
|
ipaserver_no_hbac_allow: no
|
|
ipaserver_no_pkinit: no
|
|
ipaserver_no_ui_redirect: no
|
|
### ssl certificate ###
|
|
### client ###
|
|
ipaclient_mkhomedir: no
|
|
ipaclient_no_ntp: no
|
|
#ipaclient_ssh_trust_dns: no
|
|
#ipaclient_no_ssh: no
|
|
#ipaclient_no_sshd: no
|
|
#ipaclient_no_dns_sshfp: no
|
|
### certificate system ###
|
|
ipaserver_external_ca: no
|
|
### dns ###
|
|
ipaserver_allow_zone_overlap: no
|
|
ipaserver_no_reverse: no
|
|
ipaserver_auto_reverse: no
|
|
ipaserver_no_forwarders: no
|
|
ipaserver_auto_forwarders: no
|
|
ipaserver_no_dnssec_validation: no
|
|
### ad trust ###
|
|
ipaserver_enable_compat: no
|
|
ipaserver_setup_ca: yes
|
|
### packages ###
|
|
ipaserver_install_packages: yes
|
|
### firewalld ###
|
|
ipaserver_setup_firewalld: yes
|
|
|
|
### additional ###
|
|
ipaserver_copy_csr_to_controller: no
|
|
|
|
### uninstall ###
|
|
ipaserver_ignore_topology_disconnect: no
|
|
ipaserver_ignore_last_of_role: no
|