From 9d9695a7b30adf7208d7d54afd8c6548a96fa132 Mon Sep 17 00:00:00 2001 From: jakub Date: Fri, 24 Apr 2026 14:43:37 +0000 Subject: [PATCH] Update initial_install/roles/freeipa_client/tasks/main.yml --- .../roles/freeipa_client/tasks/main.yml | 66 +++++++++---------- 1 file changed, 33 insertions(+), 33 deletions(-) diff --git a/initial_install/roles/freeipa_client/tasks/main.yml b/initial_install/roles/freeipa_client/tasks/main.yml index 9094ade..0e2c2ce 100644 --- a/initial_install/roles/freeipa_client/tasks/main.yml +++ b/initial_install/roles/freeipa_client/tasks/main.yml @@ -1,45 +1,45 @@ -```yaml --- -- name: Install FreeIPA client packages + +* name: Install FreeIPA client packages ansible.builtin.package: - name: - - freeipa-client - - sssd - - sssd-tools - - oddjob - - oddjob-mkhomedir - state: present + name: + - freeipa-client + - sssd + - sssd-tools + - oddjob + - oddjob-mkhomedir + state: present -- name: Set hostname (FQDN!) +* name: Set hostname (FQDN) ansible.builtin.hostname: - name: "{{ inventory_hostname }}.im.lab" + name: "{{ inventory_hostname }}.im.lab" -- name: Enroll to FreeIPA +* name: Enroll to FreeIPA ansible.builtin.command: > - ipa-client-install - --domain=im.lab - --realm=IPA.IM.LAB - --server=ipa.im.lab - --hostname={{ inventory_hostname }}.im.lab - --mkhomedir - --principal=admin - --password={{ ipa_admin_password }} - --unattended + ipa-client-install + --domain=im.lab + --realm=IPA.IM.LAB + --server=ipa.im.lab + --hostname={{ inventory_hostname }}.im.lab + --mkhomedir + --principal=admin + --password={{ ipa_admin_password }} + --unattended args: - creates: /etc/ipa/default.conf + creates: /etc/ipa/default.conf -- name: Configure SSSD +* name: Configure SSSD freeipa.ansible_freeipa.ipaclient_setup_sssd: - servers: ["ipa.im.lab"] - domain: im.lab - realm: IPA.IM.LAB - hostname: "{{ inventory_hostname }}.im.lab" - no_krb5_offline_passwords: yes + servers: + - ipa.im.lab + domain: im.lab + realm: IPA.IM.LAB + hostname: "{{ inventory_hostname }}.im.lab" + no_krb5_offline_passwords: true notify: Restart SSSD -- name: Enable and start SSSD +* name: Enable and start SSSD ansible.builtin.service: - name: sssd - state: started - enabled: true -``` + name: sssd + state: started + enabled: true