internet/community.general
3
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2026-05-06 13:22:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

[PR #11933/c4fc0ff4 backport][stable-12] ipa_group: fix idempotency when external: false on existing non-external group (#11987)

Browse Source 
ipa_group: fix idempotency when `external: false` on existing non-external group (#11933)

* fix(ipa_group): skip group_mod when external flag matches IPA state

When external=false (the default), get_group_diff() left the external
key in the diff even though the group was already non-external, causing
a spurious group_mod call that IPA rejected with "no modifications to
be performed". The fix checks equality in both directions.

Fixes #5061

* fix(ipa_group): add changelog fragment for PR 11933

* add quoting to fragment

(cherry picked from commit c4fc0ff4e1)

Co-authored-by: Alexei Znamensky <103110+russoz@users.noreply.github.com>
This commit is contained in:
patchback[bot]
2026-05-03 21:39:58 +02:00
committed by GitHub
parent 82555713b7
commit 4e0fdb757f
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
plugins/modules/ipa_group.py
View File

@@ -238,7 +238,8 @@ def get_group_diff(client, ipa_group, module_group):
del module_group["nonposix"]
if "external" in module_group:
if module_group["external"] and "ipaexternalgroup" in ipa_group.get("objectclass"):
is_external_in_ipa = "ipaexternalgroup" in ipa_group.get("objectclass", [])
if module_group["external"] == is_external_in_ipa:
del module_group["external"]
return client.get_diff(ipa_data=ipa_group, module_data=module_group)