mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-03-26 21:33:05 +00:00
355438cea9
Adding an A/AAAA record to a host fails if there's not a reverse zone set that the resulting PTR record can be added to, even if create_reverse is false. Changing the rule to create the reverse record fixes the issue. Fixes: #1381 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
143 lines
4.2 KiB
YAML
143 lines
4.2 KiB
YAML
---
|
|
# Cleanup tasks.
|
|
- name: Ensure that dns records are absent
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: "{{ testzone }}"
|
|
del_all: yes
|
|
name:
|
|
- host01
|
|
- host02
|
|
- host03
|
|
- host04
|
|
- _ftp._tcp
|
|
- _sip._udp
|
|
state: absent
|
|
|
|
- name: Ensure that dns reverse ipv6 records are absent
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: ip6.arpa.
|
|
del_all: yes
|
|
name:
|
|
- 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.f
|
|
- 1.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.f
|
|
- 1.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.f
|
|
- 4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.f
|
|
- 4.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.f
|
|
- 4.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.d.f
|
|
state: absent
|
|
|
|
- name: Ensure that dns reverse ipv6 records are absent (workaround)
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: "{{ zone_ipv6_reverse_workaround }}"
|
|
del_all: yes
|
|
name:
|
|
- 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
|
|
- 1.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
|
|
- 1.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
|
|
- 4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
|
|
- 4.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
|
|
- 4.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0
|
|
state: absent
|
|
|
|
- name: Ensure that dns reverse records are absent
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: "{{ zone_prefix_reverse_24 }}"
|
|
name:
|
|
- "101"
|
|
- "102"
|
|
- "103"
|
|
- "104"
|
|
- "111"
|
|
- "112"
|
|
- "113"
|
|
- "114"
|
|
- "121"
|
|
- "122"
|
|
- "123"
|
|
- "124"
|
|
del_all: yes
|
|
state: absent
|
|
|
|
- name: Ensure that dns reverse records are absent (workaround 1)
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: "{{ zone_prefix_reverse_16 }}"
|
|
name:
|
|
- "101.122"
|
|
- "102.122"
|
|
- "103.122"
|
|
- "104.122"
|
|
- "111.122"
|
|
- "112.122"
|
|
- "113.122"
|
|
- "114.122"
|
|
- "121.122"
|
|
- "122.122"
|
|
- "123.122"
|
|
- "124.122"
|
|
del_all: yes
|
|
state: absent
|
|
|
|
- name: Ensure that dns reverse records are absent (workaround 2)
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: "{{ zone_prefix_reverse_8 }}"
|
|
name:
|
|
- "168.101.122"
|
|
- "168.102.122"
|
|
- "168.103.122"
|
|
- "168.104.122"
|
|
- "168.111.122"
|
|
- "168.112.122"
|
|
- "168.113.122"
|
|
- "168.114.122"
|
|
- "168.121.122"
|
|
- "168.122.122"
|
|
- "168.123.122"
|
|
- "168.124.122"
|
|
del_all: yes
|
|
state: absent
|
|
|
|
- name: Ensure that "{{ safezone }}" dns records are absent
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
zone_name: "{{ safezone }}"
|
|
records:
|
|
- name: iron01
|
|
del_all: yes
|
|
state: absent
|
|
|
|
- name: Ensure that NS record for "{{ safezone }}" is absent
|
|
ipadnsrecord:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: iron01
|
|
zone_name: "{{ safezone }}"
|
|
ns_rec: iron01
|
|
state: absent
|
|
|
|
- name: Ensure DNS testing zones are absent.
|
|
ipadnszone:
|
|
ipaadmin_password: SomeADMINpassword
|
|
ipaapi_context: "{{ ipa_context | default(omit) }}"
|
|
name: "{{ item }}"
|
|
state: absent
|
|
with_items:
|
|
- "{{ zone_prefix_reverse_24 }}"
|
|
- "{{ zone_prefix_reverse_16 }}"
|
|
- "{{ zone_prefix_reverse_8 }}"
|
|
- "{{ zone_ipv6_reverse_workaround }}"
|
|
- "{{ testzone }}"
|
|
- "{{ safezone }}"
|