freeipa / freeipa.ansible_freeipa / 1.8.4 / module / ipaserver_setup_krb Setup KRB Authors: Thomas Woerner preview | supported by communityfreeipa.ansible_freeipa.ipaserver_setup_krb (1.8.4) — module
Install with ansible-galaxy collection install freeipa.ansible_freeipa:==1.8.4
collections: - name: freeipa.ansible_freeipa version: 1.8.4
Setup KRB
idmax: description: The max value for the IDs range (default idstart+199999) required: false realm: description: Kerberos realm name of the IPA deployment required: false domain: description: Primary DNS domain of the IPA deployment required: false idstart: description: The starting value for the IDs range (default random) required: false hostname: description: Fully qualified name of this host required: true password: description: Admin user kerberos password required: false setup_ca: description: Configure a dogtag CA required: true no_pkinit: description: Disable pkinit setup steps required: true setup_dns: description: Configure bind with our zone required: true setup_kra: description: Configure a dogtag KRA required: true ca_subject: description: The installer ca_subject setting required: true no_reverse: description: Do not create new reverse DNS zone required: true dm_password: description: Directory Manager password required: false no_host_dns: description: Do not use DNS for hostname lookup during installation required: true ip_addresses: description: List of Master Server IP Addresses required: true subject_base: description: The certificate subject base (default O=<realm-name>). RDNs are in LDAP order (most specific RDN first). required: true no_hbac_allow: description: Don't install allow_all HBAC rule required: true reverse_zones: description: The reverse DNS zones to use required: true setup_adtrust: description: Configure AD trust capability required: true auto_forwarders: description: Use DNS forwarders configured in /etc/resolv.conf required: true master_password: description: kerberos master password (normally autogenerated) required: false _pkinit_pkcs12_info: description: The installer _pkinit_pkcs12_info setting required: true external_cert_files: description: File containing the IPA CA certificate and the external CA certificate chain required: true