We have to set up the ipa-server with Ansible scripts, but there
isn't a module for everything. For example, this command needs to
be executed.
- name: ...
shell: ipa config-mod --ipaselinuxusermaporder="..."
However, that doesn't work (using either the "root" or ipa
"admin"
accounts) because the Kerberos ticket granting ticket is missing.
Hard coding user and password in a plain script or on the command
line is bad. I've really no idea how to solve this.
P.S.: The existing ipa modules for Ansible seem to do their work
over the http interface.
Ciao
Dominik ^_^ ^_^
--
Dominik Vogt