freeipa.ansible_freeipa.ipaclient_temp_krb5 (1.11.1) — module

Install collection

Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.11.1

Add to requirements.yml

  collections:
    - name: freeipa.ansible_freeipa
      version: 1.11.1

Description

Create temporary krb5 configuration for deferring the creation of the final krb5.conf on clients

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Test IPA with local keytab
- name: Test IPA in force mode with maximum 5 kinit attempts
  freeipa.ansible_freeipa.ipaclient_test_keytab:
    servers: ["server1.example.com","server2.example.com"]
    domain: example.com
    realm: EXAMPLE.COM
    kdc: server1.example.com
    hostname: client1.example.com

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

# Test IPA with ipadiscovery return values
- name: Join IPA
  freeipa.ansible_freeipa.ipaclient_test_keytab:
    servers: "{{ ipadiscovery.servers }}"
    domain: "{{ ipadiscovery.domain }}"
    realm: "{{ ipadiscovery.realm }}"
    kdc: "{{ ipadiscovery.kdc }}"
    hostname: "{{ ipadiscovery.hostname }}"

Inputs

    
kdc:
    description: The name or address of the host running the KDC
    required: true
    type: str

realm:
    description: Kerberos realm name of the IPA deployment
    required: true
    type: str

domain:
    description: Primary DNS domain of the IPA deployment
    required: true
    type: str

servers:
    description: Fully qualified name of IPA servers to enroll to
    elements: str
    required: true
    type: list

hostname:
    description: Fully qualified name of this host
    required: true
    type: str

on_master:
    default: false
    description: Whether the configuration is done on the master or not
    required: false
    type: bool

Outputs

krb_name:
  description: The krb5 config file name
  returned: always
  type: str