freeipa.ansible_freeipa.ipaclient_setup_sssd (1.8.4) — module

Install collection

Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.8.4

Add to requirements.yml

  collections:
    - name: freeipa.ansible_freeipa
      version: 1.8.4

Description

Setup sssd for IPA client

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: Configure SSSD
  freeipa.ansible_freeipa.ipaclient_setup_sssd:
    servers: ["server1.example.com","server2.example.com"]
    domain: example.com
    realm: EXAMPLE.COM
    hostname: client1.example.com
    no_krb5_offline_passwords: yes

Inputs

    
realm:
    description: Kerberos realm name of the IPA deployment
    required: false

domain:
    description: Primary DNS domain of the IPA deployment
    required: false

no_ssh:
    description: Do not configure OpenSSH client
    required: true

permit:
    description: Disable access rules by default, permit all access
    required: true

no_sshd:
    description: Do not configure OpenSSH server
    required: true

no_sudo:
    description: Do not configure SSSD as data source for sudo
    required: true

servers:
    description: Fully qualified name of IPA servers to enroll to
    required: false

hostname:
    description: Fully qualified name of this host
    required: false

on_master:
    description: Whether the configuration is done on the master or not
    required: true

fixed_primary:
    description: Configure sssd to use fixed server as primary IPA server
    required: true

preserve_sssd:
    description: Preserve old SSSD configuration if possible
    required: true

all_ip_addresses:
    description: All routable IP addresses configured on any interface will be added to
      DNS
    required: true

enable_dns_updates:
    description: Configures the machine to attempt dns updates when the ip address changes
    required: true

no_krb5_offline_passwords:
    description: Configure SSSD not to store user password when the server is offline
    required: true