On ke, 18 maalis 2020, Kimmo Rantala via FreeIPA-users wrote:
Yeah. Ansible Tower would solve this neatly but alas, we don't run
one
(although I wish we were). We will go with the currect set up for the
time being. After all, it is not that huge of a deal.
If anyone has a suggestion how to do this better, please feel free to
share it.
Please look into using ansible-freeipa. It natively supports
python3-gssapi-based Kerberos authentication for tasks performed from
the controller against IPA API, so it can do keytab-based auth and is
able to use in-memory ccaches.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland