Puppet Class: freeipa::install::server::replica

Defined in:
manifests/install/server/replica.pp

Summary

Installs freeipa server as replica

Overview

Examples:

include freeipa::install::server::replica


9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
 
# File 'manifests/install/server/replica.pp', line 9

class freeipa::install::server::replica {
  assert_private()

  $replica_install_cmd = "/usr/sbin/ipa-replica-install \
  --principal=${freeipa::principal_usedto_joindomain} \
  --admin-password='${freeipa::password_usedto_joindomain}' \
  ${freeipa::install::server::server_install_cmd_opts_hostname} \
  --realm=${freeipa::realm} \
  --domain=${freeipa::domain} \
  --server=${freeipa::ipa_master_fqdn} \
  ${freeipa::install::server::server_install_cmd_opts_setup_dns} \
  ${freeipa::install::server::server_install_cmd_opts_forwarders} \
  ${freeipa::install::server::server_install_cmd_opts_ip_address} \
  ${freeipa::install::server::server_install_cmd_opts_no_ntp} \
  ${freeipa::install::server::server_install_cmd_opts_no_ui_redirect} \
  ${freeipa::install::server::server_install_cmd_opts_setup_ca} \
  --unattended"

  if ! $facts['iparole'] or $facts['iparole'] == 'replica' {
    exec { "server_install_${freeipa::ipa_server_fqdn}":
      command   => $replica_install_cmd,
      timeout   => 0,
      unless    => '/usr/sbin/ipactl status >/dev/null 2>&1',
      creates   => '/etc/ipa/default.conf',
      logoutput => 'on_failure',
      notify    => Class['Freeipa::Helpers::Flushcache'],
      before    => Service['sssd'],
    }
  } else {
    fail ("to change ipa_role from '${facts['iparole']}' to 'replica' is not supported.")
  }
}