Bug 1784474
| Summary: | [ansible-freeipa] Not able to reset the authentication type for a user | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Varun Mylaraiah <mvarun> |
| Component: | ansible-freeipa | Assignee: | Thomas Woerner <twoerner> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 8.2 | Flags: | pm-rhel:
mirror+
|
| Target Milestone: | rc | ||
| Target Release: | 8.0 | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | ansible-freeipa-0.1.8-2.el8 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-04-28 16:01:56 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Varun Mylaraiah
2019-12-17 14:33:42 UTC
Here is the upstream PR: https://github.com/freeipa/ansible-freeipa/pull/173 Verified Manual execution console output: ================================ # rpm -q ansible-freeipa ansible-freeipa-0.1.8-3.el8.noarch [root@master ~]# ipa user-show testuser_474 User login: testuser_474 First name: 474 Last name: bz Home directory: /home/testuser_474 Login shell: /bin/sh Principal name: testuser_474 Principal alias: testuser_474 Email address: testuser_474 UID: 1660400017 GID: 1660400017 User authentication types: password, radius, otp, pkinit, hardened Account disabled: False Password: False Member of groups: ipausers Kerberos keys available: False [root@ansible ~]# cat bz474.yaml --- - name: Playbook to ensure a user is present with default userauthtype hosts: ipaserver become: true tasks: # add user with userauthtype - ipauser: ipaadmin_principal: admin ipaadmin_password: <xxxxxx> name: testuser_474 userauthtype: "" [root@ansible ~]# ansible-playbook -vv -i inventory/server.hosts bz474.yaml ansible-playbook 2.9.5 config file = /etc/ansible/ansible.cfg configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.6/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.6.8 (default, Dec 5 2019, 15:45:45) [GCC 8.3.1 20191121 (Red Hat 8.3.1-5)] Using /etc/ansible/ansible.cfg as config file PLAYBOOK: bz474.yaml ************************************************************************************************* 1 plays in bz474.yaml PLAY [Playbook to ensure a user is present with default userauthtype] ************************************************ TASK [Gathering Facts] *********************************************************************************************** task path: /root/bz474.yaml:2 ok: [master.ipadomain.test] META: ran handlers TASK [ipauser] ******************************************************************************************************* task path: /root/bz474.yaml:8 changed: [master.ipadomain.test] => {"changed": true, "user": {}} META: ran handlers META: ran handlers PLAY RECAP *********************************************************************************************************** master.ipadomain.test : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 [root@master ~]# ipa user-show testuser_474 User login: testuser_474 First name: 474 Last name: bz Home directory: /home/testuser_474 Login shell: /bin/sh Principal name: testuser_474 Principal alias: testuser_474 Email address: testuser_474 UID: 1660400017 GID: 1660400017 Account disabled: False Password: False Member of groups: ipausers Kerberos keys available: False Automated test console output: =============================== 2020-03-03T10:23:33 ansible_freeipa_tests/user_module.py::Testuser22_23_24::test_update_user_with_default_auth_type 2020-03-03T10:23:33 [1m-------------------------------- live log call ---------------------------------[0m 2020-03-03T10:23:33 [pytest_multihost.host.Host.master.ParamikoTransport] [32mINFO[0m RUN ['kinit', 'admin'] 2020-03-03T10:23:33 [pytest_multihost.host.Host.master.ParamikoTransport] [32mINFO[0m RUN ['ipa', 'user-show', 'user1784474'] 2020-03-03T10:23:34 [pytest_multihost.host.Host.master.ParamikoTransport] [32mINFO[0m RUN ['kdestroy', '-A'] 2020-03-03T10:23:34 [pytest_multihost.host.Host.ansible.ParamikoTransport] [32mINFO[0m WRITE inventory/user.hosts 2020-03-03T10:23:34 [pytest_multihost.host.Host.ansible.ParamikoTransport] [32mINFO[0m PUT user_module.yml 2020-03-03T10:23:34 [pytest_multihost.host.Host.ansible.ParamikoTransport] [32mINFO[0m RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/user.hosts', 'user_module.yml'] 2020-03-03T10:23:41 [pytest_multihost.host.Host.master.ParamikoTransport] [32mINFO[0m RUN ['kinit', 'admin'] 2020-03-03T10:23:41 [pytest_multihost.host.Host.master.ParamikoTransport] [32mINFO[0m RUN ['ipa', 'user-show', 'user1784474'] 2020-03-03T10:23:42 [32mPASSED[0m[36m [100%] Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:1705 |