forked from jakub/ansible
Update initial_install/roles/freeipa_client/tasks/main.yml
This commit is contained in:
@@ -1,45 +1,46 @@
|
|||||||
|
```yaml
|
||||||
---
|
---
|
||||||
|
- name: Install FreeIPA client packages
|
||||||
* name: Install FreeIPA client packages
|
|
||||||
ansible.builtin.package:
|
ansible.builtin.package:
|
||||||
name:
|
name:
|
||||||
- freeipa-client
|
- freeipa-client
|
||||||
- sssd
|
- sssd
|
||||||
- sssd-tools
|
- sssd-tools
|
||||||
- oddjob
|
- oddjob
|
||||||
- oddjob-mkhomedir
|
- oddjob-mkhomedir
|
||||||
state: present
|
state: present
|
||||||
|
|
||||||
* name: Set hostname (FQDN)
|
- name: Set hostname (FQDN)
|
||||||
ansible.builtin.hostname:
|
ansible.builtin.hostname:
|
||||||
name: "{{ inventory_hostname }}.im.lab"
|
name: "{{ inventory_hostname }}.im.lab"
|
||||||
|
|
||||||
* name: Enroll to FreeIPA
|
- name: Enroll to FreeIPA
|
||||||
ansible.builtin.command: >
|
ansible.builtin.command: >
|
||||||
ipa-client-install
|
ipa-client-install
|
||||||
--domain=im.lab
|
--domain=im.lab
|
||||||
--realm=IPA.IM.LAB
|
--realm=IPA.IM.LAB
|
||||||
--server=ipa.im.lab
|
--server=ipa.im.lab
|
||||||
--hostname={{ inventory_hostname }}.im.lab
|
--hostname={{ inventory_hostname }}.im.lab
|
||||||
--mkhomedir
|
--mkhomedir
|
||||||
--principal=admin
|
--principal=admin
|
||||||
--password={{ ipa_admin_password }}
|
--password={{ ipa_admin_password }}
|
||||||
--unattended
|
--unattended
|
||||||
args:
|
args:
|
||||||
creates: /etc/ipa/default.conf
|
creates: /etc/ipa/default.conf
|
||||||
|
|
||||||
* name: Configure SSSD
|
- name: Configure SSSD
|
||||||
freeipa.ansible_freeipa.ipaclient_setup_sssd:
|
freeipa.ansible_freeipa.ipaclient_setup_sssd:
|
||||||
servers:
|
servers:
|
||||||
- ipa.im.lab
|
- ipa.im.lab
|
||||||
domain: im.lab
|
domain: im.lab
|
||||||
realm: IPA.IM.LAB
|
realm: IPA.IM.LAB
|
||||||
hostname: "{{ inventory_hostname }}.im.lab"
|
hostname: "{{ inventory_hostname }}.im.lab"
|
||||||
no_krb5_offline_passwords: true
|
no_krb5_offline_passwords: true
|
||||||
notify: Restart SSSD
|
notify: Restart SSSD
|
||||||
|
|
||||||
* name: Enable and start SSSD
|
- name: Enable and start SSSD
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: sssd
|
name: sssd
|
||||||
state: started
|
state: started
|
||||||
enabled: true
|
enabled: true
|
||||||
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user