On Thu, Sep 14, 2023 at 8:10 AM Finn Fysj via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
> Hello,
>
> On 6/22/23 16:08, Finn Fysj via FreeIPA-users wrote:
>
> which IPA and ansible-freeipa versions are you using?
>
> Please provide more information about your inventory and setup.
>
> Are you trying to use the ipaserver role to deploy also replicas? The ipaserver
> role is only useful to deploy the initial master only. The replicas need to be
> deployed using the ipareplica role.
>
> Regards,
> Thomas
Thank you for answer Thomas.

The ansible-freeipa collection version is:  1.11.0
I've experienced a lot of "unconsistency" when installing IPAserver and IPA replica on my EL9 servers.

I do indeed use separated roles for the two server roles ipaserver for the master server and ipareplica role for the replica.

Even tho arguments such as:  ipaclient_mkhomedir: true, is set this is one the case for my server.


Most of the role variables are not replicated.

In the example you show the vars as set in the role call, not in an inventory file.
The same variables (ipaclient_*) should be replicated in the ipareplica role (and
on ipaclient) for the settings to be the same on all hosts.

How are you executing the ipareplica code?

Rafael

 
$ authselect current
Profile ID: sssd
Enabled featu
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--
Rafael Guterres Jeffman
Senior Software Engineer 
FreeIPA - Red Hat