Update initial_install/roles/freeipa_client/tasks/main.yml

This commit is contained in:
2026-04-24 14:45:40 +00:00
parent 9d9695a7b3
commit ef3b293977
@@ -1,45 +1,46 @@
```yaml
--- ---
- name: Install FreeIPA client packages
* name: Install FreeIPA client packages
ansible.builtin.package: ansible.builtin.package:
name: name:
- freeipa-client - freeipa-client
- sssd - sssd
- sssd-tools - sssd-tools
- oddjob - oddjob
- oddjob-mkhomedir - oddjob-mkhomedir
state: present state: present
* name: Set hostname (FQDN) - name: Set hostname (FQDN)
ansible.builtin.hostname: ansible.builtin.hostname:
name: "{{ inventory_hostname }}.im.lab" name: "{{ inventory_hostname }}.im.lab"
* name: Enroll to FreeIPA - name: Enroll to FreeIPA
ansible.builtin.command: > ansible.builtin.command: >
ipa-client-install ipa-client-install
--domain=im.lab --domain=im.lab
--realm=IPA.IM.LAB --realm=IPA.IM.LAB
--server=ipa.im.lab --server=ipa.im.lab
--hostname={{ inventory_hostname }}.im.lab --hostname={{ inventory_hostname }}.im.lab
--mkhomedir --mkhomedir
--principal=admin --principal=admin
--password={{ ipa_admin_password }} --password={{ ipa_admin_password }}
--unattended --unattended
args: args:
creates: /etc/ipa/default.conf creates: /etc/ipa/default.conf
* name: Configure SSSD - name: Configure SSSD
freeipa.ansible_freeipa.ipaclient_setup_sssd: freeipa.ansible_freeipa.ipaclient_setup_sssd:
servers: servers:
- ipa.im.lab - ipa.im.lab
domain: im.lab domain: im.lab
realm: IPA.IM.LAB realm: IPA.IM.LAB
hostname: "{{ inventory_hostname }}.im.lab" hostname: "{{ inventory_hostname }}.im.lab"
no_krb5_offline_passwords: true no_krb5_offline_passwords: true
notify: Restart SSSD notify: Restart SSSD
* name: Enable and start SSSD - name: Enable and start SSSD
ansible.builtin.service: ansible.builtin.service:
name: sssd name: sssd
state: started state: started
enabled: true enabled: true
```