mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-10 18:55:53 +00:00
80abf635c3
Due to an API misbehaviour in FreeIPA, ipaexternalmembers need to be treated differently than other group members parameters. Even an empty array triggers all tests for external members, including the check for installed dcerpc bindings. Therefore ipagroup module has been changed to not set ipaexternalmember to an empty list if there are no external members to be added or removed.
82 lines
2.2 KiB
YAML
82 lines
2.2 KiB
YAML
---
|
|
- name: Test external group group members (without trust-ad installed)
|
|
hosts: ipaserver
|
|
become: true
|
|
|
|
tasks:
|
|
- name: Ensure external test groups are absent
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name:
|
|
- externaltestgroup01
|
|
- externaltestgroup02
|
|
state: absent
|
|
|
|
- name: Create external test group 01
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externaltestgroup01
|
|
external: true
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Create external test group 02
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externaltestgroup02
|
|
external: true
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Ensure externaltestgroup02 is a member of externaltestgroup01
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externaltestgroup01
|
|
action: member
|
|
group:
|
|
- externaltestgroup02
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Ensure externaltestgroup02 is a member of externaltestgroup01, again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externaltestgroup01
|
|
action: member
|
|
group:
|
|
- externaltestgroup02
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Ensure externaltestgroup02 is not a member of externaltestgroup01
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externaltestgroup01
|
|
action: member
|
|
group:
|
|
- externaltestgroup02
|
|
state: absent
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|
|
|
|
- name: Ensure externaltestgroup02 is not a member of externaltestgroup01, again
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name: externaltestgroup01
|
|
action: member
|
|
group:
|
|
- externaltestgroup02
|
|
state: absent
|
|
register: result
|
|
failed_when: result.failed or result.changed
|
|
|
|
- name: Ensure external test groups are absent
|
|
ipagroup:
|
|
ipaadmin_password: SomeADMINpassword
|
|
name:
|
|
- externaltestgroup01
|
|
- externaltestgroup02
|
|
state: absent
|
|
register: result
|
|
failed_when: result.failed or not result.changed
|