ansible-freeipa-client

Overview

- hosts: all
  vars:
    freeipaclient_servers:
      - ipa.demo1.freeipa.org
      - ipa.demo2.freeipa.org
    freeipaclient_domain: ipa.demo1.freeipa.org
    freeipaclient_enroll_user: admin
    freeipaclient_enroll_pass: Secret123
  roles:
     - alvaroaleman.freeipa-client

Purpose

This role helps to connect clients to an IPA domain.

System Requirements

• Rocky 9
• CentOS 8
• CentOS 7
• Fedora 24
• Fedora 27
• Fedora 29
• Fedora 30
• Fedora 31
• Fedora 32
• Fedora 33
• Fedora 34
• Fedora 35
• Ubuntu Trusty
• Ubuntu Xenial

Role Variables

• freeipaclient_servers: List of IP addresses or hostnames of the IPA servers to use (string, required)
• freeipaclient_domain: Domain to connect to (string, required)
• freeipaclient_enroll_user: Username for enrolling the host in the domain (string, required)
• freeipaclient_enroll_pass: Password for enrolling the host in the domain (string, required)
• freeipaclient_hostname: Hostname for the client (string, default: output of uname -n)
• freeipaclient_dns_server: DNS server to set up. No action if this variable is empty (string)
• freeipaclient_force_join: Option to overwrite an existing host entry (boolean, default: false)
• freeipaclient_enable_ntp: Option to enable NTP. Kerberos will not function properly if there is a significant time difference between the master and client (boolean, default: true)
• freeipaclient_all_ip_addresses: Option to add all routable IP addresses to DNS (boolean, default: true if not Trusty, else false)

License

GNU AFFERO GENERAL PUBLIC LICENSE Version 3

How to Contribute

If you want to help with this project, please note that it follows a gitflow workflow. The next release branch is called next.

Please fork this repository, create a local branch from the next branch, and submit pull requests back to the original next branch.

Testing Integration

This role includes integration tests using Vagrant:

cp envvars-vagrant.sample envvars
EDITOR=vim
$EDITOR envvars
source envvars
make test

Author

This project is forked from Alvaro Aleman.