Ansible Role freeipa_client
This role installs and configures FreeIPA as a client.
Mandatory Requirements
Install the ansible-freeipa Ansible Collection on the Ansible control node. This can be done by calling
ansible-galaxy collection install freeipa.ansible_freeipa.
Optional Role Variables
Variable |
Description |
Default Value |
|---|---|---|
|
Defines if PAM will be configured to create a users home directory if it does not exist. |
|
|
The IPA admin user / Kerberos admin principal. |
|
Example:
# optional
freeipa_client__create_home_dir: true
freeipa_client__ipa_admin_user:
username: 'admin'
password: 'linuxfabrik'
Troubleshooting
msg: Unable to discover domain, not provided on command line: Check your DNS server configuration - IN SOA and IN NS options, as well as a correct _ldap._tcp IN SRV 10 10 389 freeipa-server.example.com. in your forward zone.
Joining realm failed: JSON-RPC call failed: Couldn't connect to server: Check firewall settings, perhaps a port like LDAP or HTTPS is blocked.
msg: krb5.keytab missing! Retry with ipaclient_force_join=yes to generate a new one, re-join an unprovisioned host: ansible-playbook ... --extra-vars='ipaclient_force_join=true'
IPA client already installed with a conflicting domain: Follow Manually Unconfiguring Client Machines