freeipa.ansible_freeipa.ipaclient_fix_ca (1.11.1) — module

Fix IPA ca certificate

Authors: Thomas Woerner (@t-woerner)

preview | supported by community

Install collection

Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.11.1


Add to requirements.yml

  collections:
    - name: freeipa.ansible_freeipa
      version: 1.11.1

Description

Fix IPA ca certificate

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Fix IPA ca certificate
  freeipa.ansible_freeipa.ipaclient_fix_ca:
    servers: ["server1.example.com","server2.example.com"]
    realm: EXAMPLE.COM
    basedn: dc=example,dc=com
    allow_repair: yes
    krb_name: /tmp/tmpkrb5.conf

Inputs

    
realm:
    description: Kerberos realm name of the IPA deployment
    required: true
    type: str

basedn:
    description: The basedn of the IPA server (of the form dc=example,dc=com)
    required: true
    type: str

servers:
    description: Fully qualified name of IPA servers to enroll to
    elements: str
    required: true
    type: list

krb_name:
    description: The krb5 config file name
    required: true
    type: str

allow_repair:
    description: 'Allow repair of already joined hosts. Contrary to ipaclient_force_join

      the host entry will not be changed on the server

      '
    required: true
    type: bool