freeipa / freeipa.ansible_freeipa / 1.12.1 / module / ipaclient_setup_sssd Setup sssd for IPA client Authors: Thomas Woerner (@t-woerner) preview | supported by communityfreeipa.ansible_freeipa.ipaclient_setup_sssd (1.12.1) — module
Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.12.1
collections: - name: freeipa.ansible_freeipa version: 1.12.1
Setup sssd for IPA client
- name: Configure SSSD freeipa.ansible_freeipa.ipaclient_setup_sssd: servers: ["server1.example.com","server2.example.com"] domain: example.com realm: EXAMPLE.COM hostname: client1.example.com no_krb5_offline_passwords: yes
realm: description: Kerberos realm name of the IPA deployment required: true type: str domain: description: Primary DNS domain of the IPA deployment required: true type: str no_ssh: description: Do not configure OpenSSH client required: false type: bool permit: description: Disable access rules by default, permit all access required: false type: bool no_sshd: description: Do not configure OpenSSH server required: false type: bool no_sudo: description: Do not configure SSSD as data source for sudo required: false type: bool servers: description: Fully qualified name of IPA servers to enroll to elements: str required: true type: list hostname: description: Fully qualified name of this host required: true type: str on_master: description: Whether the configuration is done on the master or not required: false type: bool fixed_primary: description: Configure sssd to use fixed server as primary IPA server required: false type: bool preserve_sssd: description: Preserve old SSSD configuration if possible required: false type: bool all_ip_addresses: description: All routable IP addresses configured on any interface will be added to DNS required: false type: bool enable_dns_updates: description: Configures the machine to attempt dns updates when the ip address changes required: false type: bool no_krb5_offline_passwords: description: Configure SSSD not to store user password when the server is offline required: false type: bool