[ol9_appstream] ansible-freeipa-1.9.2-1.el9.noarch

Ansible roles to install and uninstall FreeIPA servers, replicas and clients,
roles for backups and SmartCard configuration, modules for management and also
playbooks for all roles and modules.

Note: The Ansible playbooks and roles require a configured Ansible environment
where the Ansible nodes are reachable and are properly set up to have an IP
address and a working package manager.

Features

- Server, replica and client deployment
- Cluster deployments: Server, replicas and clients in one playbook
- One-time-password (OTP) support for client installation
- Repair mode for clients
- Backup and restore, also to and from controller
- Smartcard setup for servers and clients
- Modules for automembership rule management
- Modules for automount key management
- Modules for automount location management
- Modules for automount map management
- Modules for config management
- Modules for delegation management
- Modules for dns config management
- Modules for dns forwarder management
- Modules for dns record management
- Modules for dns zone management
- Modules for group management
- Modules for hbacrule management
- Modules for hbacsvc management
- Modules for hbacsvcgroup management
- Modules for host management
- Modules for hostgroup management
- Modules for idrange management
- Modules for location management
- Modules for netgroup management
- Modules for permission management
- Modules for privilege management
- Modules for pwpolicy management
- Modules for role management
- Modules for self service management
- Modules for server management
- Modules for service management
- Modules for service delegation rule management
- Modules for service delegation target management
- Modules for sudocmd management
- Modules for sudocmdgroup management
- Modules for sudorule management
- Modules for topology management
- Modules for trust management
- Modules for user management
- Modules for vault management

Supported FreeIPA Versions

FreeIPA versions 4.6 and up are supported by all roles.

The client role supports versions 4.4 and up, the server role is working with
versions 4.5 and up, the replica role is currently only working with versions
4.6 and up.

Supported Distributions

- RHEL/CentOS 7.4+
- Fedora 26+
- Ubuntu
- Debian 10+ (ipaclient only, no server or replica!)

Requirements

  Controller
  - Ansible version: 2.8+ (ansible-freeipa is an Ansible Collection)

  Node
  - Supported FreeIPA version (see above)
  - Supported distribution (needed for package installation only, see above)

Limitations

External signed CA is now supported. But the currently needed two step process
is an issue for the processing in a simple playbook.
Work is planned to have a new method to handle CSR for external signed CAs in
a separate step before starting the server installation.

Filelist (Show Changelog) (Show related packages)

• /

  • usr

    • share

      • ansible-freeipa

        • requirements-dev.txt

        • requirements.txt

        • utils

          • ansible-doc-test

          • ansible-freeipa.spec.in

          • build-galaxy-release.sh

          • build-srpm.sh

          • changelog

          • check_test_configuration.py

          • galaxyfy-README.py

          • galaxyfy-module-EXAMPLES.py

          • galaxyfy-playbook.py

          • galaxyfy.py

          • gen_module_docs.py

          • gen_modules_docs.sh

          • get_test_modules.py

          • lint_check.sh

          • new_module

          • run-tests.sh

          • set_test_modules

          • templates

            • README-module+member.md.in

            • README-module.md.in

            • ipamodule+member.py.in

            • ipamodule.py.in

            • module-absent.yml.in

            • module-member-absent.yml.in

            • module-member-present.yml.in

            • module-present.yml.in

            • test_module+member.yml.in

            • test_module.yml.in

            • test_module_client_context.yml.in

      • ansible

        • plugins

          • doc_fragments

            • ipamodule_base_docs.py

          • module_utils

            • ansible_freeipa_module.py

          • modules

            • README.md

            • ipaautomember.py

            • ipaautomountkey.py

            • ipaautomountlocation.py

            • ipaautomountmap.py

            • ipaconfig.py

            • ipadelegation.py

            • ipadnsconfig.py

            • ipadnsforwardzone.py

            • ipadnsrecord.py

            • ipadnszone.py

            • ipagroup.py

            • ipahbacrule.py

            • ipahbacsvc.py

            • ipahbacsvcgroup.py

            • ipahost.py

            • ipahostgroup.py

            • ipaidrange.py

            • ipalocation.py

            • ipanetgroup.py

            • ipapermission.py

            • ipaprivilege.py

            • ipapwpolicy.py

            • iparole.py

            • ipaselfservice.py

            • ipaserver.py

            • ipaservice.py

            • ipaservicedelegationrule.py

            • ipaservicedelegationtarget.py

            • ipasudocmd.py

            • ipasudocmdgroup.py

            • ipasudorule.py

            • ipatopologysegment.py

            • ipatopologysuffix.py

            • ipatrust.py

            • ipauser.py

            • ipavault.py

        • roles

          • ipabackup

            • README.md

            • defaults

              • main.yml

            • library

              • ipabackup_get_backup_dir.py

            • meta

              • main.yml

            • tasks

              • backup.yml

              • copy_backup_from_server.yml

              • copy_backup_to_server.yml

              • get_ipabackup_dir.yml

              • main.yml

              • remove_backup_from_server.yml

              • restore.yml

            • vars

              • Fedora.yml

              • RedHat-7.yml

              • RedHat-8.yml

              • Ubuntu-18.04.yml

              • Ubuntu.yml

              • default.yml

          • ipaclient

            • README.md

            • defaults

              • main.yml

            • library

              • ipaclient_api.py

              • ipaclient_configure_dns_resolver.py

              • ipaclient_fix_ca.py

              • ipaclient_fstore.py

              • ipaclient_get_otp.py

              • ipaclient_ipa_conf.py

              • ipaclient_join.py

              • ipaclient_set_hostname.py

              • ipaclient_setup_automount.py

              • ipaclient_setup_firefox.py

              • ipaclient_setup_krb5.py

              • ipaclient_setup_nis.py

              • ipaclient_setup_nss.py

              • ipaclient_setup_ntp.py

              • ipaclient_setup_ssh.py

              • ipaclient_setup_sssd.py

              • ipaclient_test.py

              • ipaclient_test_keytab.py

            • meta

              • main.yml

            • module_utils

              • ansible_ipa_client.py

            • tasks

              • install.yml

              • main.yml

              • uninstall.yml

            • vars

              • Debian-10.yml

              • Debian.yml

              • Fedora-25.yml

              • Fedora-26.yml

              • RedHat-7.3.yml

              • RedHat-7.yml

              • RedHat-8.yml

              • Ubuntu-18.04.yml

              • default.yml

          • ipareplica

            • README.md

            • defaults

              • main.yml

            • library

              • ipareplica_add_to_ipaservers.py

              • ipareplica_create_ipa_conf.py

              • ipareplica_custodia_import_dm_password.py

              • ipareplica_ds_apply_updates.py

              • ipareplica_ds_enable_ssl.py

              • ipareplica_enable_ipa.py

              • ipareplica_install_ca_certs.py

              • ipareplica_krb_enable_ssl.py

              • ipareplica_master_password.py

              • ipareplica_prepare.py

              • ipareplica_promote_openldap_conf.py

              • ipareplica_promote_sssd.py

              • ipareplica_restart_kdc.py

              • ipareplica_setup_adtrust.py

              • ipareplica_setup_ca.py

              • ipareplica_setup_certmonger.py

              • ipareplica_setup_custodia.py

              • ipareplica_setup_dns.py

              • ipareplica_setup_ds.py

              • ipareplica_setup_http.py

              • ipareplica_setup_kra.py

              • ipareplica_setup_krb.py

              • ipareplica_setup_otpd.py

              • ipareplica_test.py

            • meta

              • main.yml

            • module_utils

              • ansible_ipa_replica.py

            • tasks

              • install.yml

              • main.yml

              • uninstall.yml

            • vars

              • Fedora-25.yml

              • Fedora-26.yml

              • Fedora-27.yml

              • Fedora.yml

              • RedHat-7.yml

              • RedHat-8.yml

              • Ubuntu-18.04.yml

              • Ubuntu.yml

              • default.yml

          • ipaserver

            • README.md

            • defaults

              • main.yml

            • library

              • ipaserver_enable_ipa.py

              • ipaserver_load_cache.py

              • ipaserver_master_password.py

              • ipaserver_prepare.py

              • ipaserver_set_ds_password.py

              • ipaserver_setup_adtrust.py

              • ipaserver_setup_ca.py

              • ipaserver_setup_custodia.py

              • ipaserver_setup_dns.py

              • ipaserver_setup_ds.py

              • ipaserver_setup_http.py

              • ipaserver_setup_kra.py

              • ipaserver_setup_krb.py

              • ipaserver_setup_ntp.py

              • ipaserver_setup_otpd.py

              • ipaserver_test.py

            • meta

              • main.yml

            • module_utils

              • ansible_ipa_server.py

            • tasks

              • copy_external_cert.yml

              • install.yml

              • main.yml

              • uninstall.yml

            • vars

              • Fedora-25.yml

              • Fedora-26.yml

              • Fedora-27.yml

              • Fedora.yml

              • RedHat-7.yml

              • RedHat-8.yml

              • Ubuntu-18.04.yml

              • Ubuntu.yml

              • default.yml

          • ipasmartcard_client

            • README.md

            • defaults

              • main.yml

            • files

              • ipasmartcard_client_add_ca_to_sssd_auth_ca_db.sh

              • ipasmartcard_client_add_ca_to_systemwide_db.sh

              • ipasmartcard_client_add_pkcs11_module_to_systemwide_db.sh

            • library

              • ipasmartcard_client_get_vars.py

              • ipasmartcard_client_validate_ca_certs.py

            • meta

              • main.yml

            • tasks

              • main.yml

            • vars

              • default.yml

          • ipasmartcard_server

            • README.md

            • defaults

              • main.yml

            • files

              • ipasmartcard_server_add_ca_to_sssd_auth_ca_db.sh

              • ipasmartcard_server_add_ca_to_systemwide_db.sh

              • ipasmartcard_server_enable_ocsp_directive.sh

              • ipasmartcard_server_mark_httpd_cert_as_trusted.sh

            • library

              • ipasmartcard_server_get_vars.py

              • ipasmartcard_server_validate_ca_certs.py

            • meta

              • main.yml

            • tasks

              • main.yml

            • vars

              • default.yml

      • doc

        • ansible-freeipa

          • README-automember.md

          • README-automountkey.md

          • README-automountlocation.md

          • README-automountmap.md

          • README-backup.md

          • README-client.md

          • README-config.md

          • README-delegation.md

          • README-dnsconfig.md

          • README-dnsforwardzone.md

          • README-dnsrecord.md

          • README-dnszone.md

          • README-group.md

          • README-hbacrule.md

          • README-hbacsvc.md

          • README-hbacsvcgroup.md

          • README-host.md

          • README-hostgroup.md

          • README-idrange.md

          • README-location.md

          • README-netgroup.md

          • README-permission.md

          • README-privilege.md

          • README-pwpolicy.md

          • README-replica.md

          • README-role.md

          • README-selfservice.md

          • README-server.md

          • README-service.md

          • README-servicedelegationrule.md

          • README-servicedelegationtarget.md

          • README-smartcard_client.md

          • README-smartcard_server.md

          • README-sudocmd.md

          • README-sudocmdgroup.md

          • README-sudorule.md

          • README-topology.md

          • README-trust.md

          • README-user.md

          • README-vault.md

          • README.md

          • playbooks

            • automember

              • automember-default-group-not-set.yml

              • automember-default-group-set.yml

              • automember-default-hostgroup-not-set.yml

              • automember-default-hostgroup-set.yml

              • automember-group-absent.yml

              • automember-group-membership-all-users-rebuilt.yml

              • automember-group-membership-users-rebuilt.yml

              • automember-group-orphans-removed.yml

              • automember-group-present.yml

              • automember-hostgroup-absent.yml

              • automember-hostgroup-membership-all-hosts-rebuilt.yml

              • automember-hostgroup-membership-hosts-rebuilt.yml

              • automember-hostgroup-orphans-removed.yml

              • automember-hostgroup-present.yml

              • automember-hostgroup-rule-absent.yml

              • automember-hostgroup-rule-present.yml

            • automount

              • automount-location-absent.yml

              • automount-location-present.yml

              • automount-map-absent.yml

              • automount-map-present.yml

              • automountkey-present.yml

              • automountkey-renamed.yml

              • automoutkey-absent.yml

            • backup-server-to-controller.yml

            • backup-server.yml

            • config

              • change-ipa-domain-netbios-name.yml

              • generate-users-groups-sids.yml

              • retrieve-config.yml

              • set-ca-renewal-master-server.yml

            • copy-all-backups-from-server.yml

            • copy-backup-from-controller.yml

            • copy-backup-from-server.yml

            • delegation

              • delegation-absent.yml

              • delegation-member-absent.yml

              • delegation-member-present.yml

              • delegation-present.yml

            • dnsconfig

              • disable-global-forwarders.yml

              • disallow-reverse-sync.yml

              • forwarders-absent.yml

              • forwarders-present.yml

              • set-configuration.yml

            • dnsforwardzone

              • ensure-dnsforwardzone-is-absent.yml

              • ensure-dnsforwardzone-is-present.yml

              • ensure-dnsforwardzone-with-forwarder-port.yml

            • dnsrecord

              • ensure-A-and-AAAA-records-are-absent.yml

              • ensure-A-and-AAAA-records-are-present.yml

              • ensure-CNAME-record-is-absent.yml

              • ensure-CNAME-record-is-present.yml

              • ensure-MX-record-is-present.yml

              • ensure-PTR-record-is-present.yml

              • ensure-SRV-record-is-present.yml

              • ensure-SSHFP-record-is-present.yml

              • ensure-TLSA-record-is-present.yml

              • ensure-TXT-record-is-present.yml

              • ensure-URI-record-is-present.yml

              • ensure-dnsrecord-is-absent.yml

              • ensure-dnsrecord-is-present.yml

              • ensure-dnsrecord-with-reverse-is-present.yml

              • ensure-multiple-A-records-are-present.yml

              • ensure-presence-multiple-records.yml

            • dnszone

              • disable-zone-forwarders.yml

              • dnszone-absent.yml

              • dnszone-all-params.yml

              • dnszone-disable.yml

              • dnszone-enable.yml

              • dnszone-present.yml

              • dnszone-reverse-from-ip.yml

            • hbacrule

              • ensure-hbarule-allhosts-absent.yml

              • ensure-hbarule-allhosts-disabled.yml

              • ensure-hbarule-allhosts-enabled.yml

              • ensure-hbarule-allhosts-present.yml

              • ensure-hbarule-allhosts-server-member-absent.yml

              • ensure-hbarule-allhosts-server-member-present.yml

            • hbacsvc

              • ensure-hbacsvc-absent.yml

              • ensure-hbacsvc-present.yml

            • hbacsvcgroup

              • ensure-hbacsvcgroup-absent.yml

              • ensure-hbacsvcgroup-member-absent.yml

              • ensure-hbacsvcgroup-member-present.yml

              • ensure-hbacsvcgroup-present.yml

            • host

              • add-host.yml

              • delete-host.yml

              • disable-host.yml

              • ensure_host_with_randompassword.yml

              • host-member-allow_create_keytab-absent.yml

              • host-member-allow_create_keytab-present.yml

              • host-member-allow_retrieve_keytab-absent.yml

              • host-member-allow_retrieve_keytab-present.yml

              • host-member-certificate-absent.yml

              • host-member-certificate-present.yml

              • host-member-ipaddresses-absent.yml

              • host-member-ipaddresses-present.yml

              • host-member-managedby_host-absent.yml

              • host-member-managedby_host-present.yml

              • host-member-principal-absent.yml

              • host-member-principal-present.yml

              • host-present-with-allow_create_keytab.yml

              • host-present-with-allow_retrieve_keytab.yml

              • host-present-with-certificate.yml

              • host-present-with-managedby_host.yml

              • host-present-with-principal.yml

              • host-present-with-randompassword.yml

              • host-present-with-several-ip-addresses.yml

              • host-present.yml

              • hosts-member-certificate-absent.yml

              • hosts-member-certificate-present.yml

              • hosts-member-managedby_host-absent.yml

              • hosts-member-managedby_host-present.yml

              • hosts-member-principal-absent.yml

              • hosts-member-principal-present.yml

              • hosts-present-with-certificate.yml

              • hosts-present-with-managedby_host.yml

              • hosts-present-with-randompasswords.yml

            • hostgroup

              • ensure-hostgroup-is-absent.yml

              • ensure-hostgroup-is-present.yml

              • ensure-hosts-and-hostgroups-are-absent-in-hostgroup.yml

              • ensure-hosts-and-hostgroups-are-present-in-hostgroup.yml

              • rename-hostgroup.yml

            • idrange

              • idrange-absent.yml

              • idrange-ad-posix-present.yml

              • idrange-ad-present.yml

              • idrange-present.yml

            • install-client.yml

            • install-cluster.yml

            • install-replica.yml

            • install-server.yml

            • install-smartcard-clients.yml

            • install-smartcard-replicas.yml

            • install-smartcard-server.yml

            • install-smartcard-servers.yml

            • location

              • location-absent.yml

              • location-present.yml

            • netgroup

              • netgroup-absent.yml

              • netgroup-member-absent.yml

              • netgroup-member-present.yml

              • netgroup-present.yml

            • permission

              • permission-absent.yml

              • permission-allow-read-employeenum.yml

              • permission-member-absent.yml

              • permission-member-present.yml

              • permission-present.yml

              • permission-renamed.yml

            • privilege

              • privilege-absent.yml

              • privilege-member-absent.yml

              • privilege-member-present.yml

              • privilege-present.yml

            • pwpolicy

              • pwpolicy_absent.yml

              • pwpolicy_grace_limit.yml

              • pwpolicy_password_check.yml

              • pwpolicy_present.yml

            • remove-all-backups-from-server.yml

            • remove-backup-from-server.yml

            • restore-server-from-controller.yml

            • restore-server.yml

            • role

              • role-is-absent.yml

              • role-is-present.yml

              • role-member-group-absent.yml

              • role-member-group-present.yml

              • role-member-host-absent.yml

              • role-member-host-present.yml

              • role-member-hostgroup-absent.yml

              • role-member-hostgroup-present.yml

              • role-member-privilege-absent.yml

              • role-member-privilege-present.yml

              • role-member-service-absent.yml

              • role-member-service-present.yml

              • role-member-user-absent.yml

              • role-member-user-present.yml

              • role-members-absent.yml

              • role-members-present.yml

              • role-rename.yml

            • selfservice

              • selfservice-absent.yml

              • selfservice-member-absent.yml

              • selfservice-member-present.yml

              • selfservice-present.yml

            • server

              • server-absent-continue.yml

              • server-absent-force.yml

              • server-absent-ignore_last_of_role.yml

              • server-absent-ignore_topology_disconnect.yml

              • server-absent.yml

              • server-hidden.yml

              • server-location.yml

              • server-no-location.yml

              • server-no-service-weight.yml

              • server-not-hidden.yml

              • server-present.yml

              • server-service-weight.yml

            • service

              • service-host-is-absent.yml

              • service-host-is-present.yml

              • service-is-absent.yml

              • service-is-disabled.yml

              • service-is-present-with-all-attributes.yml

              • service-is-present-with-host-force.yml

              • service-is-present-without-host-object.yml

              • service-is-present.yml

              • service-member-allow_create_keytab-absent.yml

              • service-member-allow_create_keytab-present.yml

              • service-member-allow_retrieve_keytab-absent.yml

              • service-member-allow_retrieve_keytab-present.yml

              • service-member-certificate-absent.yml

              • service-member-certificate-present.yml

              • service-member-principal-absent.yml

              • service-member-principal-present.yml

            • servicedelegationrule

              • servicedelegationrule-absent.yml

              • servicedelegationrule-present.yml

              • servicedelegationrule-principal-member-absent.yml

              • servicedelegationrule-principal-member-present.yml

              • servicedelegationrule-target-member-absent.yml

              • servicedelegationrule-target-member-present.yml

            • servicedelegationtarget

              • servicedelegationtarget-absent.yml

              • servicedelegationtarget-member-absent.yml

              • servicedelegationtarget-member-present.yml

              • servicedelegationtarget-present.yml

            • sudocmd

              • ensure-sudocmd-is-absent.yml

              • ensure-sudocmd-is-present.yml

            • sudocmdgroup

              • ensure-sudocmd-are-absent-in-sudocmdgroup.yml

              • ensure-sudocmd-are-present-in-sudocmdgroup.yml

              • ensure-sudocmdgroup-is-absent.yml

              • ensure-sudocmdgroup-is-present.yml

            • sudorule

              • ensure-sudorule-does-not-have-sudooption.yml

              • ensure-sudorule-has-sudooption.yml

              • ensure-sudorule-host-member-is-absent.yml

              • ensure-sudorule-host-member-is-present.yml

              • ensure-sudorule-hostgroup-member-is-absent.yml

              • ensure-sudorule-hostgroup-member-is-present.yml

              • ensure-sudorule-hostmask-member-is-absent.yml

              • ensure-sudorule-hostmask-member-is-present.yml

              • ensure-sudorule-is-absent.yml

              • ensure-sudorule-is-disabled.yml

              • ensure-sudorule-is-enabled.yml

              • ensure-sudorule-is-present-with-order.yml

              • ensure-sudorule-is-present.yml

              • ensure-sudorule-runasuser-is-absent.yml

              • ensure-sudorule-runasuser-is-present.yml

              • ensure-sudorule-sudocmd-is-absent.yml

              • ensure-sudorule-sudocmd-is-present.yml

            • topology

              • add-topologysegment.yml

              • add-topologysegments.yml

              • check-topologysegments.yml

              • delete-topologysegment.yml

              • delete-topologysegments.yml

              • reinitialize-topologysegment.yml

              • verify-topologysuffix.yml

            • trust

              • add-trust.yml

              • del-trust.yml

            • uninstall-client.yml

            • uninstall-cluster.yml

            • uninstall-replica.yml

            • uninstall-server.yml

            • user

              • add-group.yml

              • add-groups-to-group.yml

              • add-user-to-group.yml

              • add-user.yml

              • delete-group.yml

              • delete-preserve-user.yml

              • delete-user.yml

              • disable-user.yml

              • enable-user.yml

              • ensure_user_with_randompassword.yml

              • ensure_users_with_randompasswords.yml

              • undelete-user.yml

              • unlock-users.yml

              • user_certificate_absent.yml

              • user_certificate_present.yml

              • user_present.yml

              • users_absent.yml

              • users_certificate_absent.yml

              • users_certificate_present.yml

              • users_present.yml

            • vault

              • change-password-symmetric-vault.yml

              • data-archive-in-asymmetric-vault.yml

              • data-archive-in-symmetric-vault.yml

              • ensure-asymetric-vault-is-absent.yml

              • ensure-asymetric-vault-is-present.yml

              • ensure-service-vault-is-absent.yml

              • ensure-service-vault-is-present.yml

              • ensure-shared-vault-is-absent.yml

              • ensure-shared-vault-is-present.yml

              • ensure-standard-vault-is-absent.yml

              • ensure-standard-vault-is-present.yml

              • ensure-symetric-vault-is-absent.yml

              • ensure-symetric-vault-is-present.yml

              • ensure-vault-is-present-with-members.yml

              • ensure-vault-member-group-is-absent.yml

              • ensure-vault-member-group-is-present.yml

              • ensure-vault-member-user-is-absent.yml

              • ensure-vault-member-user-is-present.yml

              • ensure-vault-owner-is-absent.yml

              • ensure-vault-owner-is-present.yml

              • password.txt

              • private.pem

              • public.pem

              • retrive-data-asymmetric-vault.yml

              • retrive-data-symmetric-vault.yml

              • vault-is-present-with-password-file.yml

              • vault-is-present-with-public-key-file.yml

      • licenses

        • ansible-freeipa

          • COPYING