Solved it.
So it appears that external: False generates the error.
If I omit this parameter, the role works as expected.
"external" is of type flag in the documentation. What is the specificity of
flag type?
The type should be bool. We also had type flag in README-group.md in
On Fri, 2020-03-06 at 14:45 -0300, Rafael Jeffman via FreeIPA-users
wrote:
> Hello,
>
> There is an open issue about this:
>
https://github.com/ansible/ansible/issues/25660
>
> You can try ansible-freeipa (
https://github.com/freeipa/ansible-freeipa),
> that has an idempotent ipagroup module.
>
> Regards,
>
> Rafael
>
> On Wed, Mar 4, 2020 at 9:54 AM Monkey Bizness via FreeIPA-users
> <freeipa-users(a)lists.fedorahosted.org
> <mailto:freeipa-users@lists.fedorahosted.org>> wrote:
>> Hello,
>>
>> I am working to automate my freeipa configuration (parts of it at least) and
>> I hit a strange behavior.
>> I'm not sure if it's a bug or if i'm doing it wrong.
>>
>> When creating a user group with the ipa_group ansible role (ansible 2.9.5)
>> it works fine if the there are some modifications to perform or if the group
>> doesn't exist.
>> But if I run it another time, the task fails with the message "msg":
>> "response group_mod: no modifications to be performed"
>>
>> It looks like the task sends a modification request with nothing to modify...
>>
>> I do not see the same behavior for external groups. The tasks does nothing
>> as expected.
>>
>> Is it a known issue? Is there a workaround? Am I doing it wrong?
>>
>> Here is a sample of code that generates the error.
>> ---
>> - name: Playbook to configure IPA clients with username/password
>> hosts: localhost
>> become: true
>>
>> tasks:
>> - name: "Create IPA user group"
>> ipa_group:
>> cn: "ipagroup"
>> external: False
>> state: present
>> validate_certs: False
>> ipa_host: "{{ ipaserver_host }}"
>> ipa_user: "{{ ipaadmin_principal }}"
>> ipa_pass: "{{ ipaadmin_password }}"
>> ...
>>
>> Thank you
>> Monkey
>> _______________________________________________
>> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>> <mailto:freeipa-users@lists.fedorahosted.org>
>> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>> <mailto:freeipa-users-leave@lists.fedorahosted.org>
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
>
> _______________________________________________
> FreeIPA-users mailing list --
> freeipa-users(a)lists.fedorahosted.org
> <mailto:freeipa-users@lists.fedorahosted.org>
>
> To unsubscribe send an email to
> freeipa-users-leave(a)lists.fedorahosted.org
> <mailto:freeipa-users-leave@lists.fedorahosted.org>
>
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>
> List Archives:
>
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
>
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...