Try SpotterIPA server test
Authors: Thomas Woerner (@t-woerner)
preview | supported by community
Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.11.1
collections:
- name: freeipa.ansible_freeipa
version: 1.11.1IPA server test
force:
default: false
description: Installer force parameter
required: false
type: bool
idmax:
description: The max value for the IDs range (default idstart+199999)
required: false
type: int
realm:
description: Kerberos realm name of the IPA deployment
required: false
type: str
domain:
description: Primary DNS domain of the IPA deployment
required: false
type: str
no_ntp:
default: false
description: Do not configure ntp
required: false
type: bool
idstart:
description: The starting value for the IDs range (default random)
required: false
type: int
zonemgr:
description: DNS zone manager e-mail address. Defaults to hostmaster@DOMAIN
required: false
type: str
hostname:
description: Fully qualified name of this host
required: false
type: str
http_pin:
description: The password to unlock the Apache Server private key
required: false
type: str
ntp_pool:
description: ntp server pool to use
required: false
type: str
password:
description: Admin user kerberos password
required: true
type: str
rid_base:
default: 1000
description: Start value for mapping UIDs and GIDs to RIDs
required: false
type: int
no_pkinit:
default: false
description: Disable pkinit setup steps
required: false
type: bool
setup_dns:
default: false
description: Configure bind with our zone
required: false
type: bool
setup_kra:
default: false
description: Configure a dogtag KRA
required: false
type: bool
ca_subject:
description: The installer ca_subject setting
required: false
type: str
dirsrv_pin:
description: The password to unlock the Directory Server private key
required: false
type: str
forwarders:
description: Add DNS forwarders
elements: str
required: false
type: list
no_reverse:
default: false
description: Do not create new reverse DNS zone
required: false
type: bool
pkinit_pin:
description: The password to unlock the Kerberos KDC private key
required: false
type: str
dm_password:
description: Directory Manager password
required: true
type: str
external_ca:
default: false
description: External ca setting
required: false
type: bool
no_host_dns:
default: false
description: Do not use DNS for hostname lookup during installation
required: false
type: bool
ntp_servers:
description: ntp servers to use
elements: str
required: false
type: list
auto_reverse:
default: false
description: Create necessary reverse zones
required: false
type: bool
netbios_name:
description: NetBIOS name of the IPA domain
required: false
type: str
subject_base:
description: The certificate subject base (default O=<realm-name>). RDNs are in LDAP
order (most specific RDN first).
required: false
type: str
ca_cert_files:
description: List of files containing CA certificates for the service certificate
files
elements: str
required: false
type: list
enable_compat:
default: false
description: Enable support for trusted domains for old clients
required: false
type: bool
no_forwarders:
default: false
description: Do not add any DNS forwarders, use root servers instead
required: false
type: bool
reverse_zones:
description: The reverse DNS zones to use
elements: str
required: false
type: list
setup_adtrust:
default: false
description: Configure AD trust capability
required: false
type: bool
forward_policy:
choices:
- first
- only
description: DNS forwarding policy for global forwarders
required: false
type: str
http_cert_name:
description: Name of the Apache Server SSL certificate to install
required: false
type: str
skip_mem_check:
default: false
description: Skip checking for minimum required memory
required: false
type: bool
auto_forwarders:
default: false
description: Use DNS forwarders configured in /etc/resolv.conf
required: false
type: bool
http_cert_files:
description: File containing the Apache Server SSL certificate and private key
elements: str
required: false
type: list
master_password:
description: kerberos master password (normally autogenerated)
required: false
type: str
dirsrv_cert_name:
description: Name of the Directory Server SSL certificate to install
required: false
type: str
external_ca_type:
description: Type of the external CA
required: false
type: str
pkinit_cert_name:
description: Name of the Kerberos KDC SSL certificate to install
required: false
type: str
dirsrv_cert_files:
description: Files containing the Directory Server SSL certificate and private key
elements: str
required: false
type: list
pkinit_cert_files:
description: File containing the Kerberos KDC SSL certificate and private key
elements: str
required: false
type: list
allow_zone_overlap:
default: false
description: Create DNS zone even if it already exists
required: false
type: bool
dirsrv_config_file:
description: The path to LDIF file that will be used to modify configuration of dse.ldif
during installation of the directory server instance
required: false
type: str
secondary_rid_base:
default: 100000000
description: Start value of the secondary range for mapping UIDs and GIDs to RIDs
required: false
type: int
external_ca_profile:
description: Specify the certificate profile/template to use at the external CA
required: false
type: str
external_cert_files:
description: File containing the IPA CA certificate and the external CA certificate
chain
elements: str
required: false
type: list
pki_config_override:
description: Path to ini file with config overrides
required: false
type: str
no_dnssec_validation:
default: false
description: Disable DNSSEC validation
required: false
type: bool
random_serial_numbers:
default: false
description: The installer random_serial_numbers setting
required: false
type: bool