From 7af0c2337c0e91ed5a0feb47112a3f22f3f8feca Mon Sep 17 00:00:00 2001 From: Andrea Dell'Amico Date: Thu, 14 Feb 2019 17:36:49 +0100 Subject: [PATCH] ipa-server: fix the command line installation options. --- ipa-server/defaults/main.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/ipa-server/defaults/main.yml b/ipa-server/defaults/main.yml index 993e0396..1e039d59 100644 --- a/ipa-server/defaults/main.yml +++ b/ipa-server/defaults/main.yml @@ -11,7 +11,9 @@ ipa_server_packages: ipa_server_dns_packages: - ipa-server-dns -ipa_installation_options: '--external-cert-file=/etc/pki/ipa/{{ ipa_letsencrypt_ca_filename }} --external-cert-file={{ letsencrypt_acme_certs_dir }}/fullchain --external-cert=file={{ letsencrypt_acme_certs_dir }}/privkey -r {{ ipa_server_realm }} -n {{ ipa_server_domain }} -a {{ ipa_admin_password }} -p {{ ipa_manager_password }} --hostname={{ ansible_fqdn }} -U --setup-dns --no-forwarders --no-reverse --zonemgr=s2i2s-master@isti.cnr.it' +# Comando di installazione +# installazione di rng-tools +ipa_installation_options: '--ca-cert-file=/etc/pki/ipa/{{ ipa_letsencrypt_ca_filename }} --dirsrv-cert-file=/etc/pki/ipa/cert.pem --http-cert-file=/etc/pki/ipa/cert.pem --no-pkinit -r {{ ipa_server_realm }} -n {{ ipa_server_domain }} -a {{ ipa_admin_password }} -p {{ ipa_manager_password }} --hostname={{ ansible_fqdn }} -U --setup-dns --no-forwarders --no-reverse --zonemgr=s2i2s-master@isti.cnr.it' ipa_ssl_letsencrypt_managed: True ipa_letsencrypt_ca_filename: lets-encrypt-x3-cross-signed.pem