freeipa / ansible-freeipa

Ansible roles and modules for FreeIPA
GNU General Public License v3.0
482 stars 230 forks source link

ipatopologysuffix checked not working #1204

Open FF186 opened 6 months ago

FF186 commented 6 months ago
- name: Check topology segment
  freeipa.ansible_freeipa.ipatopologysuffix:
    ipaadmin_principal: admin
    ipaadmin_password: myPassword
    suffix: domain
    left: replica1.example.com
    right: replica2.example.com
    state: checked

Result: 
FAILED! => {"changed": false, "msg": "value of state must be one of: verified, got: checked"}
t-woerner commented 6 months ago

Please use state: verified for ipatopologysuffix.

FF186 commented 6 months ago

@t-woerner , thanks for you reply.

However, I can't gain any information from running state: verified. I would really like to check if there's an error between the replicas. Not supported?

What about reinitialization?

- name: Check topology segment
  freeipa.ansible_freeipa.ipatopologysuffix:
    ipaadmin_principal: admin
    ipaadmin_password: myPassword
    suffix: domain
    left: replica1.example.com
    right: replica2.example.com
    state: reinitialized

FAILED! => {"changed": false, "msg": "value of state must be one of: verified, got: reinitialized"}

However, state: verified does not reinitialize my replicas. I still get:

replica
  last update status: Error (19) Replication error acquiring replica: Replica has different database generation ID, remote replica may need to be initialized (RUV error)
  last update ended: 1970-01-01 00:00:00+00:00
FF186 commented 6 months ago

Doens't seem to work as intended, sticking to ipa CLI for now: