t-woerner
commented
3 years ago Ansible is automatically filtering out all values in module output that is matching values of no_log parameters. As a result of this your domain is invalid. We need to use something like exit_raw_json for the modules of the roles.
IPA server params: ipaserver_domain: "kemopqqqqq.test" ipaserver_realm: "KEMOPQQQQQ.TEST" ipaadmin_password: "kemopqqq" ipadm_password: "kemopqqq" ipaserver_setup_dns: 'yes' ipaserver_no_host_dns: 'yes' ipaserver_allow_zone_overlap: 'yes' ipaserver_auto_forwarders: "yes"
It fails in task: TASK [freeipa.ansible_freeipa.ipaserver : Install - Server preparation]
The full traceback is: WARNING: The below traceback may not be related to the actual failure. File "/tmp/ansible_freeipa.ansible_freeipa.ipaserver_prepare_payload_siTgv5/ansible_freeipa.ansible_freeipa.ipaserver_prepare_payload.zip/ansible_collections/freeipa/ansible_freeipa/plugins/modules/ipaserver_prepare.py", line 350, in main File "/usr/lib/python2.7/site-packages/ipaserver/install/dns.py", line 269, in install_check True, options.ip_addresses) File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 719, in get_server_ip_address raise ScriptError() fatal: [ipasrv1.kemopqqqqq.test]: FAILED! => { "changed": false, "invocation": { "module_args": { "_hostname_overridden": true, "allow_zone_overlap": true, "auto_forwarders": true, "auto_reverse": false, "ca_cert_files": [], "ca_subject": null, "dm_password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "domain": "****qq.test", "enable_compat": false, "external_ca": false, "external_ca_profile": null, "external_ca_type": null, "external_cert_files": [], "force": false, "forward_policy": null, "forwarders": [], "hostname": "ipasrv1.****qq.test", "ip_addresses": [], "netbios_name": null, "no_dnssec_validation": false, "no_forwarders": false, "no_host_dns": true, "no_reverse": false, "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "realm": "KEMOPQQQQQ.TEST", "reverse_zones": [], "rid_base": null, "secondary_rid_base": null, "setup_adtrust": false, "setup_ca": true, "setup_dns": true, "setup_kra": false, "subject_base": null } }, "msg": "" }