On Thu, Sep 14, 2023 at 8:10 AM Finn Fysj via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
> Hello,
>
> On 6/22/23 16:08, Finn Fysj via FreeIPA-users wrote:
>
> which IPA and ansible-freeipa versions are you using?
>
> Please provide more information about your inventory and setup.
>
> Are you trying to use the ipaserver role to deploy also replicas? The
ipaserver
> role is only useful to deploy the initial master only. The replicas need
to be
> deployed using the ipareplica role.
>
> Regards,
> Thomas
Thank you for answer Thomas.
The ansible-freeipa collection version is: 1.11.0
I've experienced a lot of "unconsistency" when installing IPAserver and
IPA replica on my EL9 servers.
I do indeed use separated roles for the two server roles ipaserver for the
master server and ipareplica role for the replica.
Even tho arguments such as: ipaclient_mkhomedir: true, is set this is one
the case for my server.
Most of the role variables are not replicated.
In the example you show the vars as set in the role call, not in an
inventory file.
The same variables (ipaclient_*) should be replicated in the ipareplica
role (and
on ipaclient) for the settings to be the same on all hosts.
How are you executing the ipareplica code?
Rafael
$ authselect current
Profile ID: sssd
Enabled featu
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
--
Rafael Guterres Jeffman
Senior Software Engineer
FreeIPA - Red Hat