Ansible Role freeipa_client
This role installs and configures FreeIPA as a client.
Mandatory Requirements
Install the ansible-freeipa Ansible Collection on the Ansible control node. This can be done by calling
ansible-galaxy collection install freeipa.ansible_freeipa
.
Optional Role Variables
Variable |
Description |
Default Value |
---|---|---|
|
Defines if PAM will be configured to create a users home directory if it does not exist. |
|
|
The IPA admin user / Kerberos admin principal. |
|
Example:
# optional
freeipa_client__create_home_dir: true
freeipa_client__ipa_admin_user:
username: 'admin'
password: 'linuxfabrik'
Troubleshooting
msg: Unable to discover domain, not provided on command line
: Check your DNS server configuration - IN SOA
and IN NS
options, as well as a correct _ldap._tcp IN SRV 10 10 389 freeipa-server.example.com.
in your forward zone.
Joining realm failed: JSON-RPC call failed: Couldn't connect to server
: Check firewall settings, perhaps a port like LDAP or HTTPS is blocked.
msg: krb5.keytab missing! Retry with ipaclient_force_join=yes to generate a new one
, re-join an unprovisioned host: ansible-playbook ... --extra-vars='ipaclient_force_join=true'
IPA client already installed with a conflicting domain
: Follow Manually Unconfiguring Client Machines