Blame SPECS/ansible-freeipa.spec

234326
# Turn off automatic python byte compilation because these are Ansible
234326
# roles and the files are transferred to the node and compiled there with
26c568
# the python version used in the node
234326
%define __brp_python_bytecompile %{nil}
234326
26c568
%global python %{__python3}
26c568
234326
Summary: Roles and playbooks to deploy FreeIPA servers, replicas and clients
234326
Name: ansible-freeipa
b0ab36
Version: 0.3.8
234326
Release: 1%{?dist}
234326
URL: https://github.com/freeipa/ansible-freeipa
234326
License: GPLv3+
234326
Source: https://github.com/freeipa/ansible-freeipa/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
234326
BuildArch: noarch
234326
234326
%description
b0ab36
Ansible roles and playbooks to install and uninstall FreeIPA servers, replicas and clients. Also modules for group, host, topology and user management.
234326
b0ab36
Note: The Ansible playbooks and roles require a configured Ansible environment where the Ansible nodes are reachable and are properly set up to have an IP address and a working package manager.
234326
Features
234326
234326
- Server, replica and client deployment
234326
- Cluster deployments: Server, replicas and clients in one playbook
234326
- One-time-password (OTP) support for client installation
234326
- Repair mode for clients
26c568
- Backup and restore, also to and from controller
b0ab36
- Modules for automembership rule management
26c568
- Modules for config management
26c568
- Modules for delegation management
26c568
- Modules for dns config management
bc9142
- Modules for dns forwarder management
bc9142
- Modules for dns record management
bc9142
- Modules for dns zone management
bc9142
- Modules for group management
bc9142
- Modules for hbacrule management
bc9142
- Modules for hbacsvc management
bc9142
- Modules for hbacsvcgroup management
bc9142
- Modules for host management
bc9142
- Modules for hostgroup management
26c568
- Modules for location management
26c568
- Modules for permission management
26c568
- Modules for privilege management
bc9142
- Modules for pwpolicy management
26c568
- Modules for role management
26c568
- Modules for self service management
b0ab36
- Modules for server management
bc9142
- Modules for service management
bc9142
- Modules for sudocmd management
bc9142
- Modules for sudocmdgroup management
bc9142
- Modules for sudorule management
bc9142
- Modules for topology management
b0ab36
- Modules for trust management
bc9142
- Modules for user management
bc9142
- Modules for vault management
234326
234326
Supported FreeIPA Versions
234326
234326
FreeIPA versions 4.6 and up are supported by all roles.
234326
b0ab36
The client role supports versions 4.4 and up, the server role is working with versions 4.5 and up, the replica role is currently only working with versions 4.6 and up.
234326
Supported Distributions
234326
234326
- RHEL/CentOS 7.4+
234326
- Fedora 26+
234326
- Ubuntu
bc9142
- Debian 10+ (ipaclient only, no server or replica!)
234326
234326
Requirements
234326
234326
  Controller
bc9142
bc9142
  - Ansible version: 2.8+ (ansible-freeipa is an Ansible Collection)
bc9142
    /usr/bin/kinit is required on the controller if a one time password (OTP)
bc9142
    is used
234326
  - python3-gssapi is required on the controller if a one time password (OTP)
bc9142
    is used with keytab to install the client.
234326
234326
  Node
bc9142
234326
  - Supported FreeIPA version (see above)
234326
  - Supported distribution (needed for package installation only, see above)
234326
234326
Limitations
234326
bc9142
External signed CA is now supported. But the currently needed two step process
bc9142
is an issue for the processing in a simple playbook.
bc9142
Work is planned to have a new method to handle CSR for external signed CAs in
bc9142
a separate step before starting the server installation.
bc9142
234326
26c568
%package tests
26c568
Summary: ansible-freeipa tests
26c568
Requires: %{name} = %{version}-%{release}
26c568
26c568
%description tests
26c568
ansible-freeipa tests.
26c568
26c568
Please have a look at %{_datadir}/ansible-freeipa/requirements-tests.txt
26c568
to get the needed requrements to run the tests.
26c568
26c568
234326
%prep
234326
%setup -q
be0f05
# Do not create backup files with patches
26c568
234326
# Fix python modules and module utils:
234326
# - Remove shebang
234326
# - Remove execute flag
234326
for i in roles/ipa*/library/*.py roles/ipa*/module_utils/*.py plugins/*/*.py; do
26c568
    sed -i '1{/\/usr\/bin\/python*/d;}' $i
234326
    chmod a-x $i
234326
done
26c568
26c568
for i in utils/*.py utils/ansible-ipa-*-install utils/new_module \
26c568
         utils/changelog utils/ansible-doc-test;
26c568
do
26c568
    sed -i '{s@/usr/bin/python*@%{python}@}' $i
26c568
done
26c568
234326
234326
%build
234326
234326
%install
234326
install -m 755 -d %{buildroot}%{_datadir}/ansible/roles/
234326
cp -rp roles/ipaserver %{buildroot}%{_datadir}/ansible/roles/
234326
cp -rp roles/ipaserver/README.md README-server.md
234326
cp -rp roles/ipareplica %{buildroot}%{_datadir}/ansible/roles/
234326
cp -rp roles/ipareplica/README.md README-replica.md
234326
cp -rp roles/ipaclient %{buildroot}%{_datadir}/ansible/roles/
234326
cp -rp roles/ipaclient/README.md README-client.md
26c568
cp -rp roles/ipabackup %{buildroot}%{_datadir}/ansible/roles/
26c568
cp -rp roles/ipabackup/README.md README-backup.md
234326
install -m 755 -d %{buildroot}%{_datadir}/ansible/plugins/
234326
cp -rp plugins/* %{buildroot}%{_datadir}/ansible/plugins/
234326
26c568
install -m 755 -d %{buildroot}%{_datadir}/ansible-freeipa
26c568
cp requirements*.txt %{buildroot}%{_datadir}/ansible-freeipa/
26c568
cp -rp utils %{buildroot}%{_datadir}/ansible-freeipa/
26c568
install -m 755 -d %{buildroot}%{_datadir}/ansible-freeipa/tests
26c568
cp -rp tests %{buildroot}%{_datadir}/ansible-freeipa/
26c568
234326
%files
234326
%license COPYING
234326
%{_datadir}/ansible/roles/ipaserver
234326
%{_datadir}/ansible/roles/ipareplica
234326
%{_datadir}/ansible/roles/ipaclient
26c568
%{_datadir}/ansible/roles/ipabackup
234326
%{_datadir}/ansible/plugins/module_utils
234326
%{_datadir}/ansible/plugins/modules
bc9142
%doc README*.md
234326
%doc playbooks
26c568
%{_datadir}/ansible-freeipa/requirements.txt
26c568
%{_datadir}/ansible-freeipa/requirements-dev.txt
26c568
%{_datadir}/ansible-freeipa/utils
26c568
26c568
%files tests
26c568
%{_datadir}/ansible-freeipa/tests
26c568
%{_datadir}/ansible-freeipa/requirements-tests.txt
234326
234326
%changelog
b0ab36
* Tue Jul 13 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
b0ab36
- Update to version 0.3.8
b0ab36
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
b0ab36
  Related: RHBZ#1959875
b0ab36
- automember: Verify condition keys
b0ab36
  Related: RHBZ#1976926
b0ab36
b0ab36
* Tue Jul 13 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.7-1
b0ab36
- Update to version 0.3.7
b0ab36
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
b0ab36
  Related: RHBZ#1959875
b0ab36
- automember: Fix action to be automember or member, not service
b0ab36
  Resolves: RRBZ#1976923
b0ab36
- automember: Fix result["failed"] issues with conditions
b0ab36
  Resolves: RRBZ#1976926
b0ab36
b0ab36
* Wed Jun  9 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
b0ab36
- Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
b0ab36
  Related: RRBZ#1969847
b0ab36
b0ab36
* Wed Jun  9 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-2
b0ab36
- ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
b0ab36
  Resolves: RRBZ#1969847
b0ab36
b0ab36
* Mon Jun  7 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
b0ab36
- Update to version 0.3.6
b0ab36
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
b0ab36
  Resolves: RHBZ#1959875
b0ab36
- ansible-freeipa-tests not in the compose
b0ab36
  Resolves: RHBZ#1936869
b0ab36
- Remove unsupported parameter for (ipapermission) module: perm_rights from
b0ab36
  permission-present.yml
b0ab36
  Resolves: RHBZ#1921654
b0ab36
- Sample playbook included for selfservice module is incorrect
b0ab36
  Resolves: RHBZ#1922060
b0ab36
- ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
b0ab36
  returned 7)
b0ab36
  Resolves: RHBZ#1935123
b0ab36
- New management module ipaserver
b0ab36
  Resolves: RHBZ#1966493
b0ab36
- New management module ipaautomember
b0ab36
  Resolves: RHBZ#1966496
b0ab36
26c568
* Mon Jan 18 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.2-1
26c568
- Update to version 0.3.2
26c568
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2
26c568
  Related: RHBZ#1891826
26c568
- Not able to add additional privileges with existing privilege in role module
26c568
  Resolves: RHBZ#1893678
26c568
- Required error message while adding non-existing members in role handling
26c568
  Resolves: RHBZ#1893679
26c568
- Not able to add new members with existing members role handling
26c568
  Resolves: RHBZ#1893684
26c568
- service members are removed while updating other members in role handling
26c568
  Resolves: RHBZ#1893685
26c568
- after changing the vault type from standard to symmetric, Salt is missing
26c568
  Resolves: RHBZ#1880367
26c568
- After changing the vault type from symmetric to asymmetric, Salt is present
26c568
  in the asymmetric vault
26c568
  Resolves: RHBZ#1880377
26c568
- After changing the vault type from asymmetric to the standard vault, the
26c568
  Public key is present in the standard vault
26c568
  Resolves: RHBZ#1880378
26c568
- Not able to replace public-key-file to the public-key in asymmetric vault
26c568
  type
26c568
  Resolves: RHBZ#1880862
26c568
- ipauser module does not seem to support --check flag to ansible-playbook
26c568
  Resolves: RHBZ#1893675
26c568
- Not able to add additional attributes with existing attributes in permission
26c568
  handling
26c568
  Resolves: RHBZ#1893687
26c568
- Privilege variable is removed from permission handling
26c568
  Resolves: RHBZ#1893688
26c568
26c568
* Wed Dec  2 2020 Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
26c568
- Update to version 0.3.1
26c568
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
26c568
  Related: RHBZ#1891826
26c568
- ipabackup: Fix undefined vars for conditions in shell tasks without else
26c568
  Related: RHBZ#1894494
26c568
26c568
* Tue Dec  1 2020 Thomas Woerner <twoerner@redhat.com> - 0.3.0-2
26c568
- Ship ipabackup role for backup and restore
26c568
  Related: RHBZ#1894494
26c568
26c568
* Thu Nov 26 2020 Thomas Woerner <twoerner@redhat.com> - 0.3.0-1
26c568
- Update to version 0.3.0
26c568
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.0
26c568
  With tests sub package
26c568
  Resolves: RHBZ#1891826
26c568
- Support for firewalld zone in ipaserver and ipareplica roles 
26c568
  Resolves: RHBZ#1894488
26c568
- ipagroup: Add support for the IPA CLI option `posix`
26c568
  Resolves: RHBZ#1894493
26c568
- New ipabackup role for backup and restore
26c568
  Resolves: RHBZ#1894494
26c568
- New management module ipadelegation
26c568
  Resolves: RHBZ#1894496
26c568
- New management module ipalocation
26c568
  Resolves: RHBZ#1894497
26c568
- New management module ipaprivilege
26c568
  Resolves: RHBZ#1894498
26c568
- New management module ipapermission
26c568
  Resolves: RHBZ#1894499
26c568
- New management module iparole
26c568
  Resolves: RHBZ#1894500
26c568
- New management module ipaselfservice
26c568
  Resolves: RHBZ#1894501
26c568
- New management module ipatrust
26c568
  Resolves: RHBZ#1894502
26c568
- Fixed log of vault data return when retrieving to a file
26c568
  Resolves: RHBZ#1875378
26c568
- ipadnszone: Fix modification o SOA serial with other attributes
26c568
  Resolves: RHBZ#1876896
26c568
- Fix symmetric vault password change when using password_files
26c568
  Resolves: RHBZ#1879004
26c568
- ipadnsrecord: fix record modification behavior
26c568
  Resolves: RHBZ#1880409
26c568
  Resolves: RHBZ#1881452
26c568
- ipadnsrecord: fix record update when multiple records exist
26c568
  Resolves: RHBZ#1881436
26c568
26c568
* Tue Aug 18 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-6
26c568
- Allow to manage multiple dnszone entries
26c568
  Resolves: RHBZ#1845058
26c568
- Fixed error msgs on FreeIPABaseModule subclasses
26c568
  Resolves: RHBZ#1845051
26c568
- Fix `allow_create_keytab_host` in service module
26c568
  Resolves: RHBZ#1868020
26c568
- Modified return value for ipavault module
26c568
  Resolves: RHBZ#1867909
26c568
- Add support for option `name_from_ip` in ipadnszone module
26c568
  Resolves: RHBZ#1845056
26c568
- Fixe password behavior on Vault module
26c568
  Resolves: RHBZ#1839200
26c568
26c568
* Tue Jul 14 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-5
26c568
- ipareplica: Fix failure while deploying KRA
26c568
  Resolves: RHBZ#1855299
26c568
26c568
* Thu Jul 02 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-4
26c568
- ipa[server,replica]: Fix pkcs12 info regressions introduced with CA-less
26c568
  Resolves: RHBZ#1853284
26c568
26c568
* Wed Jul 01 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-3
26c568
- action_plugins/ipaclient_get_otp: Discovered python needed in task_vars
26c568
  Resolves: RHBZ#1852714
26c568
26c568
* Mon Jun 29 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-2
26c568
- Fixes service disable when service has no certificates attached
26c568
  Resolves: RHBZ#1836294
26c568
- Add suppport for changing password of symmetric vaults
26c568
  Resolves: RHBZ#1839197
26c568
- Fix forwardzone issues
26c568
  Resolves: RHBZ#1843826
26c568
  Resolves: RHBZ#1843828
26c568
  Resolves: RHBZ#1843829
26c568
  Resolves: RHBZ#1843830
26c568
  Resolves: RHBZ#1843831
26c568
- ipa[host]group: Fix membermanager unknow user issue
26c568
  Resolves: RHBZ#1848426
26c568
- ipa[user,host]: Fail on duplucate names in the users and hosts lists
26c568
  Resolves: RHBZ#1822683
26c568
bc9142
* Mon Jun 15 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-1
bc9142
- Update to version 0.1.12 bug fix only release
bc9142
  Related: RHBZ#1818768
bc9142
bc9142
* Thu Jun 11 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.11-1
bc9142
- Update to version 0.1.11
bc9142
  Related: RHBZ#1818768
bc9142
bc9142
* Mon Apr 27 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
bc9142
- Update to version 0.1.10:
bc9142
  - ipaclient: Not delete keytab when ipaclient_on_master is true
bc9142
  - New module to manage dns forwarder zones in ipa
bc9142
  - Enhancements of sudorule module tests
bc9142
  - Gracefully handle RuntimeError raised during parameter validation in
bc9142
    fail_jso
bc9142
  - ipareplica_prepare: Fix module DOCUMENTATION
bc9142
  - ipa[server,replica,client]: setup_logging wrapper for
bc9142
    standard_logging_setup
bc9142
  - Created FreeIPABaseModule class to facilitate creation of new modules
bc9142
  - New IPADNSZone module
bc9142
  - Add admin password to the ipadnsconfig module tests
bc9142
  - Added alias module arguments in dnszone module
bc9142
  - Fixed a bug in AnsibleFreeIPAParams
bc9142
  - utils/build-galaxy-release: Do not add release tag to version for galaxy
bc9142
  - ipaserver docs: Calm down module linter
bc9142
  - galaxy.yml: Add system tag
bc9142
  - ipareplica_setup_kra: Remove unused ccache parameter
bc9142
  - ipareplica_setup_krb: krb is assigned to but never used
bc9142
  - utils/galaxy: Make galaxy scripts more generic
bc9142
  - galaxyfy-playbook.py: Fixed script name
bc9142
  Related: RHBZ#1818768
bc9142
bc9142
* Thu Feb 20 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.8-3
bc9142
- ipahost: Do not fail on missing DNS or zone when no IP address given
bc9142
  Resolves: RHBZ#1804838
bc9142
bc9142
* Fri Feb 14 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.8-2
bc9142
- Updated RPM description for ansible-freeipa 0.1.8
bc9142
  Related: RHBZ#1748986
bc9142
- ipahost: Fix choices of auth_ind parameter, allow to reset parameter
bc9142
  Resolves: RHBZ#1783992
bc9142
- ipauser: Allow reset of userauthtype, do not depend on first,last for mod
bc9142
  Resolves: RHBZ#1784474
bc9142
- ipahost: Enhanced failure msg for member params used without member action
bc9142
  Resolves: RHBZ#1783948
bc9142
- Add missing attributes to ipasudorule
bc9142
  Resolves: RHBZ#1788168
bc9142
  Resolves: RHBZ#1788035
bc9142
  Resolves: RHBZ#1788024
bc9142
- ipapwpolicy: Use global_policy if name is not set
bc9142
  Resolves: RHBZ#1797532
bc9142
- ipahbacrule: Fix handing of members with action hbacrule
bc9142
  Resolves: RHBZ#1787996
bc9142
- ansible_freeipa_module: Fix comparison of bool parameters in compare_args_isa
bc9142
  Resolves: RHBZ#1784514
bc9142
- ipahost: Add support for several IP addresses and also to change them
bc9142
  Resolves: RHBZ#1783979
bc9142
  Resolves: RHBZ#1783976
bc9142
- ipahost: Fail on action member for new hosts, fix dnsrecord_add reverse flag
bc9142
  Resolves: RHBZ#1803026
bc9142
be0f05
* Sat Dec 14 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.8-1
be0f05
- Update to version 0.1.8 (bug fix release)
be0f05
  - roles/ipaclient/README.md: Add information about ipaclient_otp
be0f05
  - Install and enable firewalld if it is configured for ipaserver and
be0f05
    ipareplica roles
be0f05
  - ipaserver_test: Do not use zone_overlap_check for domain name validation
be0f05
  - Allow execution of API commands that do not require a name
be0f05
  - Update README-host: Drop options from allow_*keytab parameters docs
be0f05
  - ipauser: Extend email addresses with default email domain if no domain is
be0f05
    given
be0f05
    Resolves: RHBZ#1747413
be0f05
  Related: RHBZ#1748986
be0f05
be0f05
* Mon Dec  2 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.7-1
be0f05
- Update to version 0.1.7
be0f05
  - Add debian support for ipaclient
be0f05
  - Added support for predefining client OTP using ipaclient_otp
be0f05
  - ipatopologysegment: Store suffix for commands in command list
be0f05
  - ipatopologysegment: Fail for missing entry with reinitialized
be0f05
  - Utils scripts: ansible-ipa-[server,replica,client]-install
be0f05
  - ipaserver_test,ipareplica_prepare: Do not return _pkcs12_file settings
be0f05
  - ansible_freeipa_module: Add support for GSSAPI
be0f05
  - ansible_ipa_client: Drop import of configure_nsswitch_database
be0f05
  - New host management module
be0f05
  - New hostgroup management module
be0f05
  - ipagroup: Remove unused member_[present,absent] states
be0f05
  - external-ca tests: Fix typo in inventory files
be0f05
  - tests/external-signed-ca tests: Fix external-ca.sh to use proper serials
be0f05
  - ipagroup: Rework to use same mechanisms as ipahostgroup module
be0f05
  - ansible_freeipa_module: api_command should not have extra try clause
be0f05
  - ansible_freeipa_module: compare_args_ipa needs to compare lists orderless
be0f05
  - ansible_freeipa_module: New function api_check_param
be0f05
  - ansible_freeipa_module: New functions module_params_get and _afm_convert
be0f05
  - ansible_freeipa_module: Add missing to_text import for _afm_convert
be0f05
  - ansible_freeipa_module: Convert tuple to list in compare_args_ipa
be0f05
  - ansible_freeipa_module: New function api_get_realm
be0f05
  - ipauser: User module extension
be0f05
  - New sudocmd management module
be0f05
  - New sudocmdgroup management module
be0f05
  - ansible_freeipa_module: Convert int to string in compare_args_ipa
be0f05
  - New pwpolicy management module
be0f05
  - New hbacsvc (HBAC Service) management module
be0f05
  - New hbacsvcgroup (HBAC Service Group) management module
be0f05
  - ipagroup: Properly support IPA versions 4.6 and RHEL-7
be0f05
  - ipagroup: Fix changed flag, new test cases
be0f05
  - ipauser: Add info about version limitation of passwordexpiration
be0f05
  - New hbacrule (HBAC Rule) management module
be0f05
  - ipahostgroup: Fix changed flag, support IPA 4.6 on RHEL-7, new test cases
be0f05
  - New sudorule (Sudo Rule) management module
be0f05
  - ipauser: Support 'sn' alias of 'last' for surname
be0f05
  - Update galaxy.yml: Update description, drop empty dependencies
be0f05
  - Update ipauser.py: Fix typo in users.name description
be0f05
  - ipaclient: Fix misspelled sssd options
be0f05
  - ipauser: Return generated random password
be0f05
  - ipahost: Return generated random password
be0f05
  - Added context configuration to api_connect
be0f05
  - ansible_freeipa_module: Better support for KRB5CCNAME environment variable
be0f05
  - ipa[server,replica,client]: Add support for CentOS-8
be0f05
  - ipahost: Extension to be able handle several hosts and all settings
be0f05
  - Flake8 fixes
be0f05
  - Documentation updates
be0f05
  - Cleanup
be0f05
  Resolves: RHBZ#1748986
be0f05
be0f05
* Fri Sep  6 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-4
be0f05
- ansible_ipa_client: Drop import of configure_nsswitch_database
be0f05
  (RHBZ#1748905)
be0f05
be0f05
* Wed Jul 31 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-3
be0f05
- ipatopologysegment: Store suffix for commands in command list (RHBZ#1733547)
be0f05
- ipatopologysegment: Fail for missing entry with reinitialized (RHBZ#1733559)
be0f05
be0f05
* Tue Jul 23 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-2
be0f05
- Drop dirserv_cert_files key from utils/gen_module_docs.py for covscan
be0f05
be0f05
* Tue Jul 23 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-1
be0f05
- update to version 0.1.6
be0f05
  - Lots of documentation updates in READMEs and modules
be0f05
  - library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
be0f05
  - Flake8 and pylint reated fixes
be0f05
  - Fixed wrong path to CheckedIPAddress class in ipareplica_test
be0f05
  - Remove unused ipaserver/library/ipaserver.py
be0f05
  - No not use wildcard imports for modules
be0f05
  - ipareplica: Add support for pki_config_override
be0f05
  - ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
be0f05
  - ipareplica_prepare: Properly initialize pin and cert_name variables
be0f05
  - ipareplica: Fail with proper error messages
be0f05
  - ipaserver: Properly set settings related to pkcs12 files
be0f05
  - ipaclient: RawConfigParser is not always provided by six.moves.configparser
be0f05
  - ipaclient_setup_nss: paths.GETENT is not available before
be0f05
    freeipa-4.6.90.pre1
be0f05
  - ipaserver_test: Initialize value from options.zonemgr
be0f05
  - ipareplica_setup_custodia: create_replica only available in newer releases
be0f05
  - ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
be0f05
  - ipa[server,replica]: Set _packages_adtrust for Ubuntu
be0f05
  - New build script for galaxy release
be0f05
  - New utils script to update module docs
be0f05
- Changes from ansible-freeipa-0.1.5
be0f05
  - Support for IPA 4.8.0
be0f05
  - New user management module
be0f05
  - New group management module
be0f05
  - ipaserver: Support external signed CA
be0f05
  - RHEL-8 specific vars files to be able to install needed modules
be0f05
    automatically
be0f05
  - ipareplica: Fixes for certmonger and kra setup
be0f05
  - New tests folder
be0f05
  - OTP related updates to README files
be0f05
be0f05
* Thu Jul  4 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.4-2
be0f05
- ansible_ipa_client: Always set options.unattended (RHBZ#1726645)
be0f05
- ipaserver_prepare: Properly report error, do show trace back (RHBZ#1726668)
be0f05
- ipa[server,replica,client]: RHEL-8 specific vars files (RHBZ#1727095)
be0f05
- ipatopology modules: Use ipaadmin_ prefix for principal and password
be0f05
  (RHBZ#1727101)
be0f05
234326
* Mon Jun 17 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.4-1
234326
- update to version 0.1.4
234326
  - ipatopologysegment: Use commands, not command
234326
234326
* Mon Jun 17 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.3-1
234326
- update to version 0.1.3
234326
  - ipaclient_test: Fix Python2 decode use with Python3
234326
  - Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
234326
  - ipaclient_get_otp: Remove ansible_python_interpreter handling
234326
  - ipaclient: Use omit (None) for password, keytab, no string length checks
234326
  - ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
234326
  - ipaclient: Report error message if ipaclient_get_otp failed
234326
  - Fixes #17 Improve how tasks manage package installation
234326
  - ipareplica: The dm password is not needed for ipareplica_master_password
234326
  - ipareplica: Use ipareplica_server if set
234326
  - ipatopologysegment: Allow domain+ca suffix, new state: checked
234326
  - Documentation updates
234326
  - Cleanups
234326
234326
* Tue Jun 11 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-3
234326
- bump release for functional test
234326
234326
* Tue Jun 11 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-2
234326
- bump release for functional test
234326
234326
* Fri Jun  7 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-1
234326
- update to version 0.1.2
234326
  - Now a new Ansible Collection
234326
  - Fix gssapi requirement for OTP: It is only needed if keytab is used with
234326
    OTP now.
234326
  - Fix wrong ansible argument types
234326
  - Do not fail on textwrap for replica deployments with CA
234326
  - Ansible lint and galaxy fixes
234326
  - Disable automatic removal of replication agreements in uninstall
234326
  - Enable freeipa-trust service if adtrust is enabled
234326
  - Add support for hidden replica
234326
  - New topology managament modules
234326
  - Add support for pki_config_override
234326
  - Fix host name setup in server deployment
234326
  - Fix errors when ipaservers variable is not set
234326
  - Fix ipaclient install role length typo
234326
  - Cleanups
234326
  
234326
* Mon May  6 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.1-1
234326
- Initial package