On Fri, Jan 08, 2021 at 03:09:14PM +0100, Thomas Woerner via FreeIPA-users wrote:
On 1/8/21 3:02 PM, Dominik Vogt via FreeIPA-users wrote:
> We have to set up the ipa-server with Ansible scripts, but there
> isn't a module for everything. For example, this command needs to
> be executed.
>
> - name: ...
> shell: ipa config-mod --ipaselinuxusermaporder="..."
>
> However, that doesn't work (using either the "root" or ipa
"admin"
> accounts) because the Kerberos ticket granting ticket is missing.
> Hard coding user and password in a plain script or on the command
> line is bad. I've really no idea how to solve this.
>
> P.S.: The existing ipa modules for Ansible seem to do their work
> over the http interface.
>
Please have a look at the config module in ansible-freeipa:
https://github.com/freeipa/ansible-freeipa/blob/master/README-config.md
The module does not support the --ipaselinuxusermaporder option.
Ciao
Dominik ^_^ ^_^
--
Dominik Vogt