search

freeipa / ansible-freeipa

Ansible roles and modules for FreeIPA
GNU General Public License v3.0
501 stars 232 forks source link

please release a new version of the ansible collection #447

Closed RobVerduijn closed 3 years ago

RobVerduijn commented 3 years ago

Hello,

The current collection (0.2.1) of ansible freeipa from ansible galaxy fails to install ipa-server for me, However the github version of today (20201119-10:47) works fine.

Please release a new version of the collection on ansible galaxy.

Rob

chsnell commented 3 years ago

Could you explain a little more about the problems with the current version? What variable setup? What version of ansible? What base OS? I ask as I was able to use the 0.2.0 & 0.2.1 versions without issue at my $WORK site.

RobVerduijn commented 3 years ago

Since the github version was working I did not bother to deep dive into the collection to see what was wrong.

This was a new lab setup using centos8 with all updates, ansible 2.9.15. One modification was done in both cases (with the collection and github), I used clean installs for all tests, a new vm was created for each case. To get it to work the workaround of downgrading the openjdk version was required due to this bug

The downgrade was applied before using the collection and for the github version. I added a workaround to my play to enable the idm module and install the ipaserver packages, download the previous openjdk packages (sadly centos doesn't keep them in the repo like rhel does) and downgraded the openjdk-packages.

Rob

RobVerduijn commented 3 years ago

now I think about it, simply downloading and installing the older openjdk packages would have been sufficient as a workaround. ah well, as soon as centos updates to 8.3 it probably isn't needed anymore since that bug is already fixed in rhel.

Rob

rjeffman commented 3 years ago

The openjdk issue is a CentOS packaging problem, and, unfortunately, there is nothing we can do about it.

RobVerduijn commented 3 years ago

I know it is a CentOS package issue, but that was not the reason for my request.

I did a clean install without the workaround, tried the collection and it failed on something other than the ca error caused by the openjdk.

I did a clean install without the workaround and tried the github version and it failed on the openjdk bug.

I did a new install applied the workaround and used the github version, and it worked.

Finally to make sure it wasn't the openjdk bug I did a new install, applied the workaround and used the collection and it failed on something other than the ca error caused by the openjdk.

So I told my playbook one more time to create a new vm, added the workaround to my ipaserver playbook. got the github version of ansible-freeipa started the playbook....and behold......it worked

Hence my request to do a new release.

Rob

t-woerner commented 3 years ago

ansible-freeipa 0.3.0 has been released and is now available on galaxy.

If there is any issue, let us know. If you like the ansible-freeipa collection on galaxy, please rate it.