Update initial_install/roles/freeipa_client/tasks/main.yml

This commit is contained in:
2026-04-24 14:43:37 +00:00
parent becc21ff9e
commit 9d9695a7b3
@@ -1,45 +1,45 @@
```yaml
--- ---
- name: Install FreeIPA client packages
* name: Install FreeIPA client packages
ansible.builtin.package: ansible.builtin.package:
name: name:
- freeipa-client - freeipa-client
- sssd - sssd
- sssd-tools - sssd-tools
- oddjob - oddjob
- oddjob-mkhomedir - oddjob-mkhomedir
state: present state: present
- name: Set hostname (FQDN!) * name: Set hostname (FQDN)
ansible.builtin.hostname: ansible.builtin.hostname:
name: "{{ inventory_hostname }}.im.lab" name: "{{ inventory_hostname }}.im.lab"
- name: Enroll to FreeIPA * name: Enroll to FreeIPA
ansible.builtin.command: > ansible.builtin.command: >
ipa-client-install ipa-client-install
--domain=im.lab --domain=im.lab
--realm=IPA.IM.LAB --realm=IPA.IM.LAB
--server=ipa.im.lab --server=ipa.im.lab
--hostname={{ inventory_hostname }}.im.lab --hostname={{ inventory_hostname }}.im.lab
--mkhomedir --mkhomedir
--principal=admin --principal=admin
--password={{ ipa_admin_password }} --password={{ ipa_admin_password }}
--unattended --unattended
args: args:
creates: /etc/ipa/default.conf creates: /etc/ipa/default.conf
- name: Configure SSSD * name: Configure SSSD
freeipa.ansible_freeipa.ipaclient_setup_sssd: freeipa.ansible_freeipa.ipaclient_setup_sssd:
servers: ["ipa.im.lab"] servers:
domain: im.lab - ipa.im.lab
realm: IPA.IM.LAB domain: im.lab
hostname: "{{ inventory_hostname }}.im.lab" realm: IPA.IM.LAB
no_krb5_offline_passwords: yes hostname: "{{ inventory_hostname }}.im.lab"
no_krb5_offline_passwords: true
notify: Restart SSSD notify: Restart SSSD
- name: Enable and start SSSD * name: Enable and start SSSD
ansible.builtin.service: ansible.builtin.service:
name: sssd name: sssd
state: started state: started
enabled: true enabled: true
```