Thanks Flo, 

I just re-tried adding the variables to the Inventory variables, the inventory group variables, and the individual host variables in AWX.  No matter what I do, unless I add them to each individual task, when AWX runs the play, I get an error stating that the password is not set. 

--Russ

On Fri, Apr 2, 2021 at 9:56 AM Florence Blanc-Renaud <flo@redhat.com> wrote:
On 4/2/21 3:38 PM, Russ Long via FreeIPA-users wrote:
> I have an ansible role built out using the Ansible-provided FreeIPA commands, however for more flexibility I want to switch over to the ones available from the FreeIPA project directly.  I run the playbook that calls this role from AWX/Tower, and cannot figure out the proper way to set the ipaadmin_principal and ipaadmin_password so I do not have to include it on every individual task.  I have tried setting them as variables in the playbook, in the AWX Template, and in the Inventory used by AWX.
>
> These work fine if I set the principal and password on every task, but that's a lot of unnecessary code that also causes confusion for others looking at this.
>
> I'm sure I'm missing something obvious, but help would be appreciated.

Hi Russ,

you can have a look at our official documentation:
Installing an Identity Management server using an Ansible playbook [1]
It explains how to set the password either in the inventory file or in
an Ansible Vault file.

HTH,
flo

[1]
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/installing_identity_management/installing-an-identity-management-server-using-an-ansible-playbook_installing-identity-management

>
> --Russ
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
>