# STDOUT:
---v---v---v---v---v---
Using /etc/ansible/ansible.cfg as config file
PLAY [Install IPA server] ******************************************************
TASK [Gathering Facts] *********************************************************
Thursday 18 August 2022 21:52:07 +0000 (0:00:00.020) 0:00:00.020 *******
ok: [sut]
TASK [Set __is_beaker_env] *****************************************************
Thursday 18 August 2022 21:52:08 +0000 (0:00:01.209) 0:00:01.229 *******
ok: [sut] => {
"ansible_facts": {
"__is_beaker_env": false
},
"changed": false
}
TASK [Install ansible-freeipa] *************************************************
Thursday 18 August 2022 21:52:08 +0000 (0:00:00.076) 0:00:01.306 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Clone ansible-freeipa repo] **********************************************
Thursday 18 August 2022 21:52:08 +0000 (0:00:00.038) 0:00:01.344 *******
changed: [sut -> 127.0.0.1] => {
"after": "a3a7ecd817f01bebc36ffc83709c1fef5fd93b8a",
"before": null,
"changed": true
}
TASK [Create role symlinks] ****************************************************
Thursday 18 August 2022 21:52:10 +0000 (0:00:01.449) 0:00:02.793 *******
changed: [sut -> 127.0.0.1] => (item=ipaserver) => {
"ansible_loop_var": "item",
"changed": true,
"dest": "/WORKDIR/dist-git-certificate-use_distro_python_cryptography-GEkvSr/tests/roles/ipaserver",
"gid": 1001,
"group": "jenkins",
"item": "ipaserver",
"mode": "0777",
"owner": "jenkins",
"size": 34,
"src": "/tmp/freeipa-repo/roles/ipaserver/",
"state": "link",
"uid": 1000090000
}
changed: [sut -> 127.0.0.1] => (item=ipaclient) => {
"ansible_loop_var": "item",
"changed": true,
"dest": "/WORKDIR/dist-git-certificate-use_distro_python_cryptography-GEkvSr/tests/roles/ipaclient",
"gid": 1001,
"group": "jenkins",
"item": "ipaclient",
"mode": "0777",
"owner": "jenkins",
"size": 34,
"src": "/tmp/freeipa-repo/roles/ipaclient/",
"state": "link",
"uid": 1000090000
}
TASK [ensure hostname package is installed] ************************************
Thursday 18 August 2022 21:52:10 +0000 (0:00:00.599) 0:00:03.392 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Set hostname] ************************************************************
Thursday 18 August 2022 21:52:11 +0000 (0:00:01.192) 0:00:04.585 *******
changed: [sut] => {
"ansible_facts": {
"ansible_domain": "test.local",
"ansible_fqdn": "ipaserver.test.local",
"ansible_hostname": "ipaserver",
"ansible_nodename": "ipaserver.test.local"
},
"changed": true,
"name": "ipaserver.test.local"
}
TASK [Ensure nss package is up-to-date] ****************************************
Thursday 18 August 2022 21:52:12 +0000 (0:00:00.940) 0:00:05.525 *******
changed: [sut] => {
"changed": true,
"rc": 0,
"results": [
"Installed: nss-softokn-3.79.0-11.el9_0.x86_64",
"Installed: nss-softokn-freebl-3.79.0-11.el9_0.x86_64",
"Installed: nss-sysinit-3.79.0-11.el9_0.x86_64",
"Installed: nss-util-3.79.0-11.el9_0.x86_64",
"Installed: nspr-4.34.0-11.el9_0.x86_64",
"Installed: nss-3.79.0-11.el9_0.x86_64"
]
}
TASK [Include ipaserver role] **************************************************
Thursday 18 August 2022 21:52:15 +0000 (0:00:02.823) 0:00:08.350 *******
TASK [ipaserver : Import variables specific to distribution] *******************
Thursday 18 August 2022 21:52:15 +0000 (0:00:00.048) 0:00:08.398 *******
ok: [sut] => (item=/tmp/freeipa-repo/roles/ipaserver/vars/default.yml) => {
"ansible_facts": {
"ipaserver_packages": [
"ipa-server",
"python3-libselinux"
],
"ipaserver_packages_adtrust": [
"freeipa-server-trust-ad"
],
"ipaserver_packages_dns": [
"ipa-server-dns"
],
"ipaserver_packages_firewalld": [
"firewalld"
]
},
"ansible_included_var_files": [
"/tmp/freeipa-repo/roles/ipaserver/vars/default.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "/tmp/freeipa-repo/roles/ipaserver/vars/default.yml"
}
TASK [ipaserver : Install IPA server] ******************************************
Thursday 18 August 2022 21:52:15 +0000 (0:00:00.070) 0:00:08.468 *******
included: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml for sut
TASK [ipaserver : Install - Ensure that IPA server packages are installed] *****
Thursday 18 August 2022 21:52:15 +0000 (0:00:00.102) 0:00:08.571 *******
changed: [sut] => {
"changed": true,
"rc": 0,
"results": [
"Installed: libipa_hbac-2.7.3-2.el9.x86_64",
"Installed: idm-pki-server-11.2.1-1.el9.noarch",
"Installed: idm-pki-tools-11.2.1-1.el9.x86_64",
"Installed: idm-tomcatjss-8.2.0-1.el9.noarch",
"Installed: libkadm5-1.19.1-22.el9.x86_64",
"Installed: perl-Devel-Peek-1.28-479.el9.x86_64",
"Installed: ipa-client-4.10.0-5.el9.x86_64",
"Installed: ipa-client-common-4.10.0-5.el9.noarch",
"Installed: ipa-common-4.10.0-5.el9.noarch",
"Installed: ipa-healthcheck-core-0.9-9.el9.noarch",
"Installed: ipa-selinux-4.10.0-5.el9.noarch",
"Installed: ipa-server-4.10.0-5.el9.x86_64",
"Installed: ipa-server-common-4.10.0-5.el9.noarch",
"Installed: iso-codes-4.6.0-3.el9.noarch",
"Installed: libpciaccess-0.16-6.el9.x86_64",
"Installed: jakarta-activation-1.2.2-5.el9.noarch",
"Installed: jakarta-annotations-1.3.5-12.el9.noarch",
"Installed: libpkgconf-1.7.3-9.el9.x86_64",
"Installed: libpng-2:1.6.37-12.el9.x86_64",
"Installed: libproxy-0.4.15-35.el9.x86_64",
"Installed: java-11-openjdk-1:11.0.16.0.8-2.el9.x86_64",
"Installed: java-11-openjdk-devel-1:11.0.16.0.8-2.el9.x86_64",
"Installed: java-11-openjdk-headless-1:11.0.16.0.8-2.el9.x86_64",
"Installed: java-17-openjdk-headless-1:17.0.4.0.8-3.el9.x86_64",
"Installed: perl-IO-Compress-2.102-4.el9.noarch",
"Installed: perl-IO-Compress-Lzma-2.101-4.el9.noarch",
"Installed: javapackages-filesystem-6.0.0-3.el9.noarch",
"Installed: javapackages-tools-6.0.0-3.el9.noarch",
"Installed: jaxb-api-2.3.3-5.el9.noarch",
"Installed: perl-IO-Zlib-1:1.11-4.el9.noarch",
"Installed: jbigkit-libs-2.1-23.el9.x86_64",
"Installed: jboss-jaxrs-2.0-api-1.0.0-16.el9.noarch",
"Installed: jboss-logging-3.4.1-9.el9.noarch",
"Installed: jboss-logging-tools-2.2.1-7.el9.noarch",
"Installed: jdeparser-2.0.3-12.el9.noarch",
"Installed: libsss_autofs-2.7.3-2.el9.x86_64",
"Installed: libusbx-1.0.26-1.el9.x86_64",
"Installed: libwbclient-4.16.4-100.el9.x86_64",
"Installed: lksctp-tools-1.0.19-2.el9.x86_64",
"Installed: perl-Term-ReadLine-1.17-479.el9.noarch",
"Installed: mailcap-2.1.49-5.el9.noarch",
"Installed: perl-Text-Diff-1.45-13.el9.noarch",
"Installed: perl-Tie-4.6-479.el9.noarch",
"Installed: perl-debugger-1.56-479.el9.noarch",
"Installed: openldap-clients-2.6.2-3.el9.x86_64",
"Installed: perl-meta-notation-5.32.1-479.el9.noarch",
"Installed: perl-sigtrap-1.09-479.el9.noarch",
"Installed: perl-threads-1:2.25-460.el9.x86_64",
"Installed: perl-threads-shared-1.61-460.el9.x86_64",
"Installed: pkgconf-1.7.3-9.el9.x86_64",
"Installed: pkgconf-m4-1.7.3-9.el9.noarch",
"Installed: pkgconf-pkg-config-1.7.3-9.el9.x86_64",
"Installed: polkit-0.117-10.el9_0.x86_64",
"Installed: polkit-libs-0.117-10.el9_0.x86_64",
"Installed: polkit-pkla-compat-0.1-21.el9.x86_64",
"Installed: protobuf-c-1.3.3-12.el9.x86_64",
"Installed: python3-dns-2.1.0-6.el9.noarch",
"Installed: python3-libipa_hbac-2.7.3-2.el9.x86_64",
"Installed: pipewire-0.3.47-2.el9.x86_64",
"Installed: pipewire-alsa-0.3.47-2.el9.x86_64",
"Installed: python3-sss-2.7.3-2.el9.x86_64",
"Installed: python3-sss-murmur-2.7.3-2.el9.x86_64",
"Installed: python3-sssdconfig-2.7.3-2.el9.noarch",
"Installed: pipewire-jack-audio-connection-kit-0.3.47-2.el9.x86_64",
"Installed: python3-systemd-234-18.el9.x86_64",
"Installed: pipewire-libs-0.3.47-2.el9.x86_64",
"Installed: pipewire-pulseaudio-0.3.47-2.el9.x86_64",
"Installed: pixman-0.40.0-5.el9.x86_64",
"Installed: pki-jackson-annotations-2.11.4-6.el9.noarch",
"Installed: pki-jackson-core-2.11.4-6.el9.noarch",
"Installed: pki-jackson-databind-2.11.4-6.el9.noarch",
"Installed: pki-jackson-jaxrs-json-provider-2.11.4-7.el9.noarch",
"Installed: pki-jackson-jaxrs-providers-2.11.4-7.el9.noarch",
"Installed: pki-jackson-module-jaxb-annotations-2.11.4-8.el9.noarch",
"Installed: pki-resteasy-client-3.0.26-15.el9.noarch",
"Installed: pki-resteasy-core-3.0.26-15.el9.noarch",
"Installed: pki-resteasy-jackson2-provider-3.0.26-15.el9.noarch",
"Installed: pki-servlet-4.0-api-1:9.0.50-1.el9.noarch",
"Installed: pki-servlet-engine-1:9.0.50-1.el9.noarch",
"Installed: samba-client-libs-4.16.4-100.el9.x86_64",
"Installed: samba-common-4.16.4-100.el9.noarch",
"Installed: samba-common-libs-4.16.4-100.el9.x86_64",
"Installed: shared-mime-info-2.1-4.el9.x86_64",
"Installed: policycoreutils-python-utils-3.4-2.el9.noarch",
"Installed: poppler-21.01.0-13.el9.x86_64",
"Installed: poppler-data-0.4.9-9.el9.noarch",
"Installed: poppler-glib-21.01.0-13.el9.x86_64",
"Installed: sssd-common-pac-2.7.3-2.el9.x86_64",
"Installed: sssd-dbus-2.7.3-2.el9.x86_64",
"Installed: sssd-ipa-2.7.3-2.el9.x86_64",
"Installed: sssd-krb5-common-2.7.3-2.el9.x86_64",
"Installed: sssd-tools-2.7.3-2.el9.x86_64",
"Installed: lcms2-2.12-3.el9.x86_64",
"Installed: libX11-1.7.0-7.el9.x86_64",
"Installed: libX11-common-1.7.0-7.el9.noarch",
"Installed: libX11-xcb-1.7.0-7.el9.x86_64",
"Installed: publicsuffix-list-20210518-3.el9.noarch",
"Installed: pulseaudio-libs-15.0-2.el9.x86_64",
"Installed: libXau-1.0.9-8.el9.x86_64",
"Installed: pulseaudio-utils-15.0-2.el9.x86_64",
"Installed: libXcomposite-0.4.5-7.el9.x86_64",
"Installed: libXcursor-1.2.0-7.el9.x86_64",
"Installed: python3-argcomplete-1.12.0-5.el9.noarch",
"Installed: libXdamage-1.1.5-7.el9.x86_64",
"Installed: python3-augeas-0.5.0-25.el9.noarch",
"Installed: libXext-1.3.4-8.el9.x86_64",
"Installed: libXfixes-5.0.3-16.el9.x86_64",
"Installed: python3-cffi-1.14.5-5.el9.x86_64",
"Installed: libXft-2.3.3-8.el9.x86_64",
"Installed: words-3.0-39.el9.noarch",
"Installed: python3-cryptography-36.0.1-2.el9.x86_64",
"Installed: libXi-1.7.10-8.el9.x86_64",
"Installed: libXinerama-1.1.4-10.el9.x86_64",
"Installed: python3-gssapi-1.6.9-5.el9.x86_64",
"Installed: 389-ds-base-2.1.1-3.el9.x86_64",
"Installed: 389-ds-base-libs-2.1.1-3.el9.x86_64",
"Installed: python3-idm-pki-11.2.1-1.el9.noarch",
"Installed: python3-ipaclient-4.10.0-5.el9.noarch",
"Installed: libXrandr-1.5.2-8.el9.x86_64",
"Installed: python3-ipalib-4.10.0-5.el9.noarch",
"Installed: python3-ipaserver-4.10.0-5.el9.noarch",
"Installed: libXrender-0.9.10-16.el9.x86_64",
"Installed: python3-jwcrypto-0.8-4.el9.noarch",
"Installed: python3-kdcproxy-1.0.0-7.el9.noarch",
"Installed: libXtst-1.2.3-16.el9.x86_64",
"Installed: libXv-1.0.11-16.el9.x86_64",
"Installed: python3-ldap-3.3.1-9.el9.x86_64",
"Installed: python3-lib389-2.1.1-3.el9.noarch",
"Installed: libXxf86vm-1.1.4-18.el9.x86_64",
"Installed: abattis-cantarell-fonts-0.301-4.el9.noarch",
"Installed: libappstream-glib-0.7.18-4.el9.x86_64",
"Installed: python3-mod_wsgi-4.7.1-10.el9.x86_64",
"Installed: adwaita-cursor-theme-40.1.1-3.el9.noarch",
"Installed: libasyncns-0.8-22.el9.x86_64",
"Installed: python3-netaddr-0.8.0-5.el9.noarch",
"Installed: adwaita-icon-theme-40.1.1-3.el9.noarch",
"Installed: alsa-lib-1.2.7.2-1.el9.x86_64",
"Installed: python3-ply-3.11-14.el9.noarch",
"Installed: python3-psutil-5.8.0-12.el9.x86_64",
"Installed: python3-pyasn1-0.4.8-6.el9.noarch",
"Installed: python3-pyasn1-modules-0.4.8-6.el9.noarch",
"Installed: python3-pycparser-2.20-6.el9.noarch",
"Installed: python3-pyusb-1.0.2-13.el9.noarch",
"Installed: python3-qrcode-core-6.1-12.el9.noarch",
"Installed: libcanberra-0.30-26.el9.x86_64",
"Installed: libcanberra-gtk3-0.30-26.el9.x86_64",
"Installed: ant-1.10.9-7.el9.noarch",
"Installed: ant-lib-1.10.9-7.el9.noarch",
"Installed: python3-yubico-1.3.3-7.el9.noarch",
"Installed: libdatrie-0.2.13-4.el9.x86_64",
"Installed: apache-commons-cli-1.4-16.el9.noarch",
"Installed: apache-commons-codec-1.15-6.el9.noarch",
"Installed: apache-commons-io-1:2.8.0-7.el9.noarch",
"Installed: apache-commons-lang3-3.12.0-5.el9.noarch",
"Installed: apache-commons-logging-1.2-29.el9.noarch",
"Installed: apache-commons-net-3.6-14.el9.noarch",
"Installed: libdb-utils-5.3.28-53.el9.x86_64",
"Installed: libdrm-2.4.111-1.el9.x86_64",
"Installed: apr-1.7.0-11.el9.x86_64",
"Installed: apr-util-1.6.1-20.el9.x86_64",
"Installed: apr-util-bdb-1.6.1-20.el9.x86_64",
"Installed: apr-util-openssl-1.6.1-20.el9.x86_64",
"Installed: libepoxy-1.5.5-4.el9.x86_64",
"Installed: at-spi2-atk-2.38.0-4.el9.x86_64",
"Installed: at-spi2-core-2.40.3-1.el9.x86_64",
"Installed: atk-2.36.0-5.el9.x86_64",
"Installed: libexif-0.6.22-6.el9.x86_64",
"Installed: augeas-libs-1.13.0-2.el9.x86_64",
"Installed: libfontenc-1.1.3-17.el9.x86_64",
"Installed: libicu-67.1-9.el9.x86_64",
"Installed: libgexiv2-0.12.3-1.el9.x86_64",
"Installed: libglvnd-1:1.3.4-1.el9.x86_64",
"Installed: libglvnd-egl-1:1.3.4-1.el9.x86_64",
"Installed: libglvnd-glx-1:1.3.4-1.el9.x86_64",
"Installed: avahi-glib-0.8-12.el9.x86_64",
"Installed: libgsf-1.14.47-5.el9.x86_64",
"Installed: bind-libs-32:9.16.23-4.el9.x86_64",
"Installed: bind-license-32:9.16.23-4.el9.noarch",
"Installed: bind-utils-32:9.16.23-4.el9.x86_64",
"Installed: libgxps-0.3.2-3.el9.x86_64",
"Installed: idm-pki-acme-11.2.1-1.el9.noarch",
"Installed: libiptcdata-1.0.5-9.el9.x86_64",
"Installed: libjose-11-3.el9.x86_64",
"Installed: libjpeg-turbo-2.0.90-5.el9.x86_64",
"Installed: libldac-2.0.2.3-10.el9.x86_64",
"Installed: redhat-logos-httpd-90.4-1.el9.noarch",
"Installed: redhat-logos-ipa-90.4-1.el9.noarch",
"Installed: cairo-1.17.4-7.el9.x86_64",
"Installed: cairo-gobject-1.17.4-7.el9.x86_64",
"Installed: certmonger-0.79.14-7.el9.x86_64",
"Installed: libnotify-0.7.9-8.el9.x86_64",
"Installed: libnsl2-2.0.0-1.el9.x86_64",
"Installed: rtkit-0.11-28.el9.x86_64",
"Installed: libogg-2:1.3.4-6.el9.x86_64",
"Installed: libosinfo-1.9.0-5.el9.x86_64",
"Installed: colord-libs-1.4.5-4.el9.x86_64",
"Installed: libproxy-webkitgtk4-0.4.15-35.el9.x86_64",
"Installed: copy-jdk-configs-4.0-3.el9.noarch",
"Installed: cyrus-sasl-md5-2.1.27-20.el9.x86_64",
"Installed: dconf-0.40.0-6.el9.x86_64",
"Installed: slapi-nis-0.56.7-4.el9.x86_64",
"Installed: slf4j-1.7.30-12.el9.noarch",
"Installed: slf4j-jdk14-1.7.30-12.el9.noarch",
"Installed: softhsm-2.6.1-7.el9.2.x86_64",
"Installed: sound-theme-freedesktop-0.8-17.el9.noarch",
"Installed: sscg-3.0.0-5.el9.x86_64",
"Installed: sssd-idp-2.7.3-2.el9.x86_64",
"Installed: librsvg2-2.50.7-1.el9.x86_64",
"Installed: libsbc-1.4-9.el9.x86_64",
"Installed: exempi-2.6.0-0.2.20211007gite23c213.el9.x86_64",
"Installed: exiv2-0.27.5-2.el9.x86_64",
"Installed: exiv2-libs-0.27.5-2.el9.x86_64",
"Installed: fdk-aac-free-2.0.0-8.el9.x86_64",
"Installed: libsndfile-1.0.31-7.el9.x86_64",
"Installed: libsoup-2.72.0-8.el9.x86_64",
"Installed: libstemmer-0-18.585svn.el9.x86_64",
"Installed: libthai-0.1.28-8.el9.x86_64",
"Installed: libtheora-1:1.1.1-31.el9.x86_64",
"Installed: libtiff-4.4.0-2.el9.x86_64",
"Installed: flac-libs-1.3.3-10.el9.x86_64",
"Installed: libtool-ltdl-2.4.6-45.el9.x86_64",
"Installed: flatpak-1.12.7-2.el9.x86_64",
"Installed: libtracker-sparql-3.1.2-2.el9.x86_64",
"Installed: flatpak-selinux-1.12.7-2.el9.noarch",
"Installed: flatpak-session-helper-1.12.7-2.el9.x86_64",
"Installed: libuv-1:1.42.0-1.el9.x86_64",
"Installed: fontawesome-fonts-1:4.7.0-13.el9.noarch",
"Installed: fontconfig-2.14.0-1.el9.x86_64",
"Installed: fribidi-1.0.10-6.el9.2.x86_64",
"Installed: libvisual-1:0.4.0-34.el9.x86_64",
"Installed: fstrm-0.6.1-3.el9.x86_64",
"Installed: libvorbis-1:1.3.7-5.el9.x86_64",
"Installed: libwayland-client-1.19.0-4.el9.x86_64",
"Installed: libwayland-cursor-1.19.0-4.el9.x86_64",
"Installed: libwayland-egl-1.19.0-4.el9.x86_64",
"Installed: libwayland-server-1.19.0-4.el9.x86_64",
"Installed: libwebp-1.2.0-3.el9.x86_64",
"Installed: libxcb-1.13.1-9.el9.x86_64",
"Installed: libxkbcommon-1.0.3-4.el9.x86_64",
"Installed: libxshmfence-1.3-10.el9.x86_64",
"Installed: gdk-pixbuf2-2.42.6-2.el9.x86_64",
"Installed: gdk-pixbuf2-modules-2.42.6-2.el9.x86_64",
"Installed: geoclue2-2.5.7-5.el9.x86_64",
"Installed: llvm-libs-14.0.6-1.el9.x86_64",
"Installed: giflib-5.2.1-9.el9.x86_64",
"Installed: ModemManager-glib-1.18.2-3.el9.x86_64",
"Installed: low-memory-monitor-2.1-4.el9.x86_64",
"Installed: lua-5.4.2-4.el9.x86_64",
"Installed: lua-posix-35.0-8.el9.x86_64",
"Installed: autofs-1:5.1.7-31.el9.x86_64",
"Installed: avahi-libs-0.8-12.el9.x86_64",
"Installed: bash-completion-1:2.11-4.el9.noarch",
"Installed: bluez-libs-5.64-2.el9.x86_64",
"Installed: bubblewrap-0.4.1-6.el9.x86_64",
"Installed: mesa-libEGL-22.1.1-2.el9.x86_64",
"Installed: mesa-libGL-22.1.1-2.el9.x86_64",
"Installed: cups-libs-1:2.3.3op2-16.el9.x86_64",
"Installed: mesa-libgbm-22.1.1-2.el9.x86_64",
"Installed: cyrus-sasl-gssapi-2.1.27-20.el9.x86_64",
"Installed: mesa-libglapi-22.1.1-2.el9.x86_64",
"Installed: cyrus-sasl-plain-2.1.27-20.el9.x86_64",
"Installed: mesa-vulkan-drivers-22.1.1-2.el9.x86_64",
"Installed: mkfontscale-1.2.1-3.el9.x86_64",
"Installed: mod_auth_gssapi-1.6.3-7.el9.x86_64",
"Installed: mod_http2-1.15.19-2.el9.x86_64",
"Installed: mod_lookup_identity-1.0.0-15.el9.x86_64",
"Installed: mod_lua-2.4.53-6.el9.x86_64",
"Installed: mod_session-2.4.53-6.el9.x86_64",
"Installed: mod_ssl-1:2.4.53-6.el9.x86_64",
"Installed: totem-pl-parser-3.26.6-2.el9.x86_64",
"Installed: freetype-2.10.4-9.el9.x86_64",
"Installed: fuse-2.9.9-15.el9.x86_64",
"Installed: fuse-common-3.10.2-5.el9.x86_64",
"Installed: tracker-3.1.2-2.el9.x86_64",
"Installed: tracker-miners-3.1.2-1.el9.x86_64",
"Installed: ttmkfdir-3.0.9-65.el9.x86_64",
"Installed: glib-networking-2.68.3-3.el9.x86_64",
"Installed: tzdata-java-2022a-1.el9.noarch",
"Installed: upower-0.99.13-2.el9.x86_64",
"Installed: graphene-1.10.6-2.el9.x86_64",
"Installed: gsm-1.0.19-6.el9.x86_64",
"Installed: gstreamer1-1.18.4-4.el9.x86_64",
"Installed: gstreamer1-plugins-base-1.18.4-5.el9.x86_64",
"Installed: vulkan-loader-1.3.216.0-1.el9_0.x86_64",
"Installed: gtk-update-icon-cache-3.24.31-2.el9.x86_64",
"Installed: gtk3-3.24.31-2.el9.x86_64",
"Installed: webkit2gtk3-jsc-2.36.6-1.el9.x86_64",
"Installed: webrtc-audio-processing-0.3.1-8.el9.x86_64",
"Installed: wireplumber-0.4.8-1.el9.x86_64",
"Installed: wireplumber-libs-0.4.8-1.el9.x86_64",
"Installed: nss-tools-3.79.0-11.el9_0.x86_64",
"Installed: xdg-dbus-proxy-0.1.3-1.el9.x86_64",
"Installed: xdg-desktop-portal-1.12.4-1.el9.x86_64",
"Installed: xdg-desktop-portal-gtk-1.12.0-3.el9.x86_64",
"Installed: hicolor-icon-theme-0.17-13.el9.noarch",
"Installed: open-sans-fonts-1.10-16.el9.noarch",
"Installed: xkeyboard-config-2.33-2.el9.noarch",
"Installed: xml-common-0.6.3-58.el9.noarch",
"Installed: httpcomponents-client-4.5.13-2.el9.noarch",
"Installed: httpcomponents-core-4.4.13-6.el9.noarch",
"Installed: httpd-2.4.53-6.el9.x86_64",
"Installed: httpd-core-2.4.53-6.el9.x86_64",
"Installed: httpd-filesystem-2.4.53-6.el9.noarch",
"Installed: httpd-tools-2.4.53-6.el9.x86_64",
"Installed: openjpeg2-2.4.0-7.el9.x86_64",
"Installed: openssl-perl-1:3.0.1-40.el9_0.x86_64",
"Installed: xorg-x11-fonts-Type1-7.5-33.el9.noarch",
"Installed: opus-1.3.1-10.el9.x86_64",
"Installed: orc-0.4.31-6.el9.x86_64",
"Installed: graphite2-1.3.14-9.el9.x86_64",
"Installed: osinfo-db-20220727-3.el9.noarch",
"Installed: osinfo-db-tools-1.9.0-3.el9.x86_64",
"Installed: ostree-libs-2022.3-2.el9.x86_64",
"Installed: p11-kit-server-0.24.1-2.el9.x86_64",
"Installed: gsettings-desktop-schemas-40.0-4.el9.x86_64",
"Installed: harfbuzz-2.7.4-8.el9.x86_64",
"Installed: pango-1.48.7-2.el9.x86_64",
"Installed: krb5-pkinit-1.19.1-22.el9.x86_64",
"Installed: krb5-server-1.19.1-22.el9.x86_64",
"Installed: krb5-workstation-1.19.1-22.el9.x86_64",
"Installed: perl-Algorithm-Diff-1.2010-4.el9.noarch",
"Installed: perl-Archive-Tar-2.38-6.el9.noarch",
"Installed: perl-Compress-Raw-Bzip2-2.101-5.el9.x86_64",
"Installed: perl-Compress-Raw-Lzma-2.101-3.el9.x86_64",
"Installed: perl-Compress-Raw-Zlib-2.101-5.el9.x86_64",
"Installed: libgudev-237-1.el9.x86_64",
"Installed: libgusb-0.3.8-1.el9.x86_64",
"Installed: idm-jss-5.2.0-1.el9.x86_64",
"Installed: idm-ldapjdk-5.2.0-1.el9.noarch",
"Installed: perl-DB_File-1.855-4.el9.x86_64",
"Installed: idm-pki-base-11.2.1-1.el9.noarch",
"Installed: idm-pki-ca-11.2.1-1.el9.noarch",
"Installed: idm-pki-java-11.2.1-1.el9.noarch",
"Installed: idm-pki-kra-11.2.1-1.el9.noarch"
]
}
TASK [ipaserver : Install - Ensure that IPA server packages for dns are installed] ***
Thursday 18 August 2022 21:54:01 +0000 (0:01:45.811) 0:01:54.383 *******
changed: [sut] => {
"changed": true,
"rc": 0,
"results": [
"Installed: python3-bind-32:9.16.23-4.el9.noarch",
"Installed: sqlite-3.34.1-5.el9.x86_64",
"Installed: ipa-server-dns-4.10.0-5.el9.noarch",
"Installed: opendnssec-2.1.8-4.el9.x86_64",
"Installed: bind-32:9.16.23-4.el9.x86_64",
"Installed: bind-dnssec-doc-32:9.16.23-4.el9.noarch",
"Installed: bind-dnssec-utils-32:9.16.23-4.el9.x86_64",
"Installed: bind-dyndb-ldap-11.9-7.el9.x86_64",
"Installed: ldns-1.7.1-11.el9.x86_64",
"Installed: opencryptoki-3.18.0-4.el9.x86_64",
"Installed: opencryptoki-icsftok-3.18.0-4.el9.x86_64",
"Installed: opencryptoki-libs-3.18.0-4.el9.x86_64"
]
}
TASK [ipaserver : Install - Ensure that IPA server packages for adtrust are installed] ***
Thursday 18 August 2022 21:54:08 +0000 (0:00:06.643) 0:02:01.026 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Ensure that firewall packages installed] ***********
Thursday 18 August 2022 21:54:08 +0000 (0:00:00.050) 0:02:01.077 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [ipaserver : Firewalld service - Ensure that firewalld is running] ********
Thursday 18 August 2022 21:54:09 +0000 (0:00:01.169) 0:02:02.246 *******
changed: [sut] => {
"changed": true,
"enabled": true,
"name": "firewalld",
"state": "started",
"status": {
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "system.slice basic.target polkit.service dbus-broker.service dbus.socket sysinit.target",
"AllowIsolate": "no",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "network-pre.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "[not set]",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "nftables.service iptables.service ipset.service ip6tables.service shutdown.target ebtables.service",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "\"man:firewalld(1)\"",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecReloadEx": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "18446744073709551615",
"IOReadOperations": "18446744073709551615",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "18446744073709551615",
"IOWriteOperations": "18446744073709551615",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "0",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "65536",
"LimitMEMLOCKSoft": "65536",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "13959",
"LimitNPROCSoft": "13959",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "13959",
"LimitSIGPENDINGSoft": "13959",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "0",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "infinity",
"MemoryCurrent": "[not set]",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemorySwapMax": "infinity",
"MountAPIVFS": "no",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "system.slice sysinit.target dbus.socket",
"Restart": "no",
"RestartKillSignal": "15",
"RestartUSec": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StateChangeTimestampMonotonic": "0",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SuccessAction": "none",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "[not set]",
"TasksMax": "22334",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "disabled",
"UtmpMode": "init",
"Wants": "network-pre.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "infinity"
}
}
TASK [ipaserver : Firewalld - Verify runtime zone "{{ ipaserver_firewalld_zone }}"] ***
Thursday 18 August 2022 21:54:11 +0000 (0:00:01.715) 0:02:03.962 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Firewalld - Verify permanent zone "{{ ipaserver_firewalld_zone }}"] ***
Thursday 18 August 2022 21:54:11 +0000 (0:00:00.053) 0:02:04.016 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : include_tasks] ***********************************************
Thursday 18 August 2022 21:54:11 +0000 (0:00:00.052) 0:02:04.069 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Server installation test] **************************
Thursday 18 August 2022 21:54:11 +0000 (0:00:00.053) 0:02:04.122 *******
ok: [sut] => {
"_dirsrv_ca_cert": null,
"_dirsrv_pkcs12_info": null,
"_hostname_overridden": true,
"_http_ca_cert": null,
"_http_pkcs12_info": null,
"_installation_cleanup": true,
"_pkinit_ca_cert": null,
"_pkinit_pkcs12_info": null,
"changed": false,
"domain": "test.local",
"domainlevel": 1,
"external_ca": false,
"external_ca_profile": null,
"external_ca_type": null,
"hostname": "ipaserver.test.local",
"idmax": 1048999999,
"idstart": 1048800000,
"ipa_python_version": 41000,
"no_host_dns": true,
"no_pkinit": false,
"ntp_pool": null,
"ntp_servers": null,
"realm": "TEST.LOCAL",
"rid_base": 1000,
"secondary_rid_base": 100000000,
"setup_adtrust": false,
"setup_ca": true,
"setup_kra": false,
"sid_generation_always": true
}
TASK [ipaserver : Install - Master password creation] **************************
Thursday 18 August 2022 21:54:13 +0000 (0:00:02.117) 0:02:06.240 *******
changed: [sut] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": true
}
TASK [ipaserver : Install - Use new master password] ***************************
Thursday 18 August 2022 21:54:14 +0000 (0:00:01.378) 0:02:07.618 *******
ok: [sut] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaserver : Install - Server preparation] ********************************
Thursday 18 August 2022 21:54:14 +0000 (0:00:00.057) 0:02:07.676 *******
changed: [sut] => {
"_ca_subject": "CN=Certificate Authority,O=TEST.LOCAL",
"_random_serial_numbers": false,
"_subject_base": "O=TEST.LOCAL",
"adtrust_netbios_name": "TEST",
"adtrust_reset_netbios_name": true,
"ca_subject": "CN=Certificate Authority,O=TEST.LOCAL",
"changed": true,
"dns_ip_addresses": [
"10.31.8.223"
],
"dns_reverse_zones": [],
"forward_policy": "only",
"forwarders": [
"10.29.169.13",
"10.29.170.12",
"10.2.32.1"
],
"ip_addresses": [
"10.31.8.223"
],
"no_dnssec_validation": true,
"reverse_zones": [],
"subject_base": "O=TEST.LOCAL"
}
TASK [ipaserver : Install - Setup NTP] *****************************************
Thursday 18 August 2022 21:54:17 +0000 (0:00:02.684) 0:02:10.360 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup DS] ******************************************
Thursday 18 August 2022 21:54:25 +0000 (0:00:07.852) 0:02:18.213 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup KRB] *****************************************
Thursday 18 August 2022 21:54:44 +0000 (0:00:18.710) 0:02:36.924 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup custodia] ************************************
Thursday 18 August 2022 21:54:52 +0000 (0:00:07.930) 0:02:44.855 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup CA] ******************************************
Thursday 18 August 2022 21:54:58 +0000 (0:00:05.878) 0:02:50.733 *******
changed: [sut] => {
"changed": true,
"csr_generated": false
}
TASK [ipaserver : Copy /root/ipa.csr to "sut-ipa.csr"] *************************
Thursday 18 August 2022 21:58:57 +0000 (0:03:59.479) 0:06:50.212 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Setup otpd] ****************************************
Thursday 18 August 2022 21:58:57 +0000 (0:00:00.056) 0:06:50.269 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup HTTP] ****************************************
Thursday 18 August 2022 21:59:00 +0000 (0:00:03.381) 0:06:53.650 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup KRA] *****************************************
Thursday 18 August 2022 21:59:42 +0000 (0:00:41.633) 0:07:35.284 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Setup DNS] *****************************************
Thursday 18 August 2022 21:59:42 +0000 (0:00:00.057) 0:07:35.342 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Setup ADTRUST] *************************************
Thursday 18 August 2022 22:00:00 +0000 (0:00:17.489) 0:07:52.831 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Set DS password] ***********************************
Thursday 18 August 2022 22:00:14 +0000 (0:00:14.459) 0:08:07.290 *******
changed: [sut] => {
"changed": true
}
TASK [Install - Setup client] **************************************************
Thursday 18 August 2022 22:00:17 +0000 (0:00:02.805) 0:08:10.096 *******
TASK [ipaclient : Import variables specific to distribution] *******************
Thursday 18 August 2022 22:00:17 +0000 (0:00:00.090) 0:08:10.186 *******
ok: [sut] => (item=/tmp/freeipa-repo/roles/ipaclient/vars/default.yml) => {
"ansible_facts": {
"ipaclient_packages": [
"ipa-client",
"python3-libselinux"
]
},
"ansible_included_var_files": [
"/tmp/freeipa-repo/roles/ipaclient/vars/default.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "/tmp/freeipa-repo/roles/ipaclient/vars/default.yml"
}
TASK [ipaclient : Install IPA client] ******************************************
Thursday 18 August 2022 22:00:17 +0000 (0:00:00.127) 0:08:10.313 *******
included: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml for sut
TASK [ipaclient : Install - Ensure that IPA client packages are installed] *****
Thursday 18 August 2022 22:00:17 +0000 (0:00:00.111) 0:08:10.425 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [ipaclient : Install - Set ipaclient_servers] *****************************
Thursday 18 August 2022 22:00:19 +0000 (0:00:01.270) 0:08:11.695 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Set ipaclient_servers from cluster inventory] ******
Thursday 18 August 2022 22:00:19 +0000 (0:00:00.059) 0:08:11.754 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Check that either principal or keytab is set] ******
Thursday 18 August 2022 22:00:19 +0000 (0:00:00.060) 0:08:11.815 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Set default principal if no keytab is given] *******
Thursday 18 August 2022 22:00:19 +0000 (0:00:00.056) 0:08:11.871 *******
ok: [sut] => {
"ansible_facts": {
"ipaadmin_principal": "admin"
},
"changed": false
}
TASK [ipaclient : Install - IPA client test] ***********************************
Thursday 18 August 2022 22:00:19 +0000 (0:00:00.074) 0:08:11.946 *******
ok: [sut] => {
"basedn": "dc=test,dc=local",
"changed": false,
"client_already_configured": false,
"client_domain": "test.local",
"dnsok": false,
"domain": "test.local",
"hostname": "ipaserver.test.local",
"ipa_python_version": 41000,
"kdc": "ipaserver.test.local",
"nosssd_files": {},
"ntp_pool": null,
"ntp_servers": null,
"realm": "TEST.LOCAL",
"servers": [
"ipaserver.test.local"
],
"sssd": true
}
TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
Thursday 18 August 2022 22:00:20 +0000 (0:00:01.012) 0:08:12.958 *******
ok: [sut] => {
"changed": false,
"path": "/etc/ipa/.dns_ccache",
"state": "absent"
}
TASK [ipaclient : Install - Configure NTP] *************************************
Thursday 18 August 2022 22:00:20 +0000 (0:00:00.327) 0:08:13.286 *******
ok: [sut] => {
"changed": false
}
TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
Thursday 18 August 2022 22:00:21 +0000 (0:00:00.943) 0:08:14.230 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
Thursday 18 August 2022 22:00:21 +0000 (0:00:00.061) 0:08:14.291 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
Thursday 18 August 2022 22:00:21 +0000 (0:00:00.061) 0:08:14.353 *******
ok: [sut] => {
"ca_crt_exists": true,
"changed": false,
"krb5_conf_ok": true,
"krb5_keytab_ok": true,
"ping_test_ok": true
}
TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
Thursday 18 August 2022 22:00:23 +0000 (0:00:02.059) 0:08:16.412 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
Thursday 18 August 2022 22:00:23 +0000 (0:00:00.061) 0:08:16.474 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
Thursday 18 August 2022 22:00:23 +0000 (0:00:00.075) 0:08:16.550 *******
skipping: [sut] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Install - Report error for OTP generation] *******************
Thursday 18 August 2022 22:00:23 +0000 (0:00:00.064) 0:08:16.615 *******
skipping: [sut] => {}
TASK [ipaclient : Install - Store the previously obtained OTP] *****************
Thursday 18 August 2022 22:00:23 +0000 (0:00:00.059) 0:08:16.675 *******
skipping: [sut] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Store predefined OTP in admin_password] **********************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.060) 0:08:16.736 *******
skipping: [sut] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Install - Check if principal and keytab are set] *************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.059) 0:08:16.796 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.062) 0:08:16.858 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Purge TEST.LOCAL from host keytab] *****************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.062) 0:08:16.920 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Backup and set hostname] ***************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.061) 0:08:16.981 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Join IPA] ******************************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.059) 0:08:17.041 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : krb5 configuration not correct] ******************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.060) 0:08:17.101 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : IPA test failed] *********************************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.061) 0:08:17.163 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : ca.crt file is missing] **************************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.064) 0:08:17.227 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure IPA default.conf] ************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.063) 0:08:17.290 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure SSSD] ************************************
Thursday 18 August 2022 22:00:24 +0000 (0:00:00.065) 0:08:17.356 *******
changed: [sut] => {
"changed": true
}
TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
Thursday 18 August 2022 22:00:25 +0000 (0:00:00.995) 0:08:18.351 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
Thursday 18 August 2022 22:00:25 +0000 (0:00:00.065) 0:08:18.416 *******
changed: [sut] => {
"ca_enabled": true,
"changed": true,
"subject_base": "O=TEST.LOCAL"
}
TASK [ipaclient : Install - Fix IPA ca] ****************************************
Thursday 18 August 2022 22:00:28 +0000 (0:00:03.000) 0:08:21.416 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Create IPA NSS database] ***************************
Thursday 18 August 2022 22:00:28 +0000 (0:00:00.066) 0:08:21.483 *******
changed: [sut] => {
"ca_enabled_ra": true,
"changed": true
}
TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
Thursday 18 August 2022 22:00:35 +0000 (0:00:06.336) 0:08:27.820 *******
changed: [sut] => {
"changed": true
}
TASK [ipaclient : Install - Configure automount] *******************************
Thursday 18 August 2022 22:00:36 +0000 (0:00:01.009) 0:08:28.829 *******
changed: [sut] => {
"changed": true
}
TASK [ipaclient : Install - Configure firefox] *********************************
Thursday 18 August 2022 22:00:37 +0000 (0:00:00.942) 0:08:29.772 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure NIS] *************************************
Thursday 18 August 2022 22:00:37 +0000 (0:00:00.064) 0:08:29.836 *******
changed: [sut] => {
"changed": true
}
TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
Thursday 18 August 2022 22:00:38 +0000 (0:00:01.286) 0:08:31.123 *******
skipping: [sut] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Cleanup leftover ccache] *************************************
Thursday 18 August 2022 22:00:38 +0000 (0:00:00.060) 0:08:31.184 *******
ok: [sut] => {
"changed": false,
"path": "/etc/ipa/.dns_ccache",
"state": "absent"
}
TASK [ipaclient : Uninstall IPA client] ****************************************
Thursday 18 August 2022 22:00:38 +0000 (0:00:00.356) 0:08:31.540 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Enable IPA] ****************************************
Thursday 18 August 2022 22:00:38 +0000 (0:00:00.069) 0:08:31.610 *******
changed: [sut] => {
"changed": true
}
TASK [ipaserver : Install - Cleanup root IPA cache] ****************************
Thursday 18 August 2022 22:01:10 +0000 (0:00:32.024) 0:09:03.634 *******
ok: [sut] => {
"changed": false,
"path": "/root/.ipa_cache",
"state": "absent"
}
TASK [ipaserver : Install - Configure firewalld] *******************************
Thursday 18 August 2022 22:01:11 +0000 (0:00:00.475) 0:09:04.109 *******
changed: [sut] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--permanent",
"--zone=",
"--add-service=freeipa-ldap",
"--add-service=freeipa-ldaps",
"--add-service=dns",
"--add-service=ntp"
],
"delta": "0:00:00.685340",
"end": "2022-08-18 22:01:12.708803",
"rc": 0,
"start": "2022-08-18 22:01:12.023463"
}
STDOUT:
success
TASK [ipaserver : Install - Configure firewalld runtime] ***********************
Thursday 18 August 2022 22:01:12 +0000 (0:00:01.318) 0:09:05.428 *******
changed: [sut] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--zone=",
"--add-service=freeipa-ldap",
"--add-service=freeipa-ldaps",
"--add-service=dns",
"--add-service=ntp"
],
"delta": "0:00:00.633057",
"end": "2022-08-18 22:01:13.809589",
"rc": 0,
"start": "2022-08-18 22:01:13.176532"
}
STDOUT:
success
TASK [ipaserver : Cleanup temporary files] *************************************
Thursday 18 August 2022 22:01:13 +0000 (0:00:01.101) 0:09:06.530 *******
ok: [sut] => (item=/etc/ipa/.tmp_pkcs12_dirsrv) => {
"ansible_loop_var": "item",
"changed": false,
"item": "/etc/ipa/.tmp_pkcs12_dirsrv",
"path": "/etc/ipa/.tmp_pkcs12_dirsrv",
"state": "absent"
}
ok: [sut] => (item=/etc/ipa/.tmp_pkcs12_http) => {
"ansible_loop_var": "item",
"changed": false,
"item": "/etc/ipa/.tmp_pkcs12_http",
"path": "/etc/ipa/.tmp_pkcs12_http",
"state": "absent"
}
ok: [sut] => (item=/etc/ipa/.tmp_pkcs12_pkinit) => {
"ansible_loop_var": "item",
"changed": false,
"item": "/etc/ipa/.tmp_pkcs12_pkinit",
"path": "/etc/ipa/.tmp_pkcs12_pkinit",
"state": "absent"
}
TASK [ipaserver : Uninstall IPA server] ****************************************
Thursday 18 August 2022 22:01:15 +0000 (0:00:01.271) 0:09:07.801 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
PLAY [Issue IPA signed certificates] *******************************************
TASK [Gathering Facts] *********************************************************
Thursday 18 August 2022 22:01:15 +0000 (0:00:00.087) 0:09:07.888 *******
ok: [sut]
TASK [linux-system-roles.certificate : Set version specific variables] *********
Thursday 18 August 2022 22:01:16 +0000 (0:00:01.074) 0:09:08.963 *******
included: /WORKDIR/dist-git-certificate-use_distro_python_cryptography-GEkvSr/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for sut
TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ******
Thursday 18 August 2022 22:01:16 +0000 (0:00:00.039) 0:09:09.003 *******
ok: [sut]
TASK [linux-system-roles.certificate : Set platform/version specific variables] ***
Thursday 18 August 2022 22:01:16 +0000 (0:00:00.589) 0:09:09.592 *******
skipping: [sut] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=RedHat_9.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat_9.yml",
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=RedHat_9.1.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat_9.1.yml",
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] ***
Thursday 18 August 2022 22:01:16 +0000 (0:00:00.058) 0:09:09.651 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [linux-system-roles.certificate : Ensure provider packages are installed] ***
Thursday 18 August 2022 22:01:18 +0000 (0:00:01.146) 0:09:10.798 *******
ok: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] ***
Thursday 18 August 2022 22:01:19 +0000 (0:00:01.188) 0:09:11.986 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] ***
Thursday 18 August 2022 22:01:19 +0000 (0:00:00.338) 0:09:12.324 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 6,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure provider service is running] *****
Thursday 18 August 2022 22:01:19 +0000 (0:00:00.334) 0:09:12.659 *******
ok: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Thu 2022-08-18 21:57:48 UTC",
"ActiveEnterTimestampMonotonic": "751006627",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "dbus.socket network.target systemd-journald.socket syslog.target dbus-broker.service system.slice basic.target sysinit.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Thu 2022-08-18 21:57:48 UTC",
"AssertTimestampMonotonic": "750993448",
"Before": "shutdown.target multi-user.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "63837580000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Thu 2022-08-18 21:57:48 UTC",
"ConditionTimestampMonotonic": "750993440",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "12228",
"ExecMainStartTimestamp": "Thu 2022-08-18 21:57:48 UTC",
"ExecMainStartTimestampMonotonic": "750995027",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "18446744073709551615",
"IOReadOperations": "18446744073709551615",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "18446744073709551615",
"IOWriteOperations": "18446744073709551615",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Thu 2022-08-18 21:57:48 UTC",
"InactiveExitTimestampMonotonic": "750995508",
"InvocationID": "9c729f3091644abd862c18329b2e8780",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "0",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "65536",
"LimitMEMLOCKSoft": "65536",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "13959",
"LimitNPROCSoft": "13959",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "13959",
"LimitSIGPENDINGSoft": "13959",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "12228",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "infinity",
"MemoryCurrent": "6225920",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemorySwapMax": "infinity",
"MountAPIVFS": "no",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"PIDFile": "/run/certmonger.pid",
"PartOf": "dbus-broker.service",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "sysinit.target system.slice dbus.socket",
"Restart": "no",
"RestartKillSignal": "15",
"RestartUSec": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StateChangeTimestamp": "Thu 2022-08-18 22:00:42 UTC",
"StateChangeTimestampMonotonic": "924308729",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "1",
"TasksMax": "22334",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [linux-system-roles.certificate : Ensure certificate requests] ************
Thursday 18 August 2022 22:01:20 +0000 (0:00:00.505) 0:09:13.164 *******
changed: [sut] => (item={'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "ipa",
"dns": "ipaserver.test.local",
"name": "mycert_basic_ipa",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
}
MSG:
Certificate requested (new).
changed: [sut] => (item={'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "ipa",
"dns": "ipaserver.test.local",
"group": "ftp",
"name": "groupcert",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
}
MSG:
Certificate requested (new). File attributes updated.
PLAY [Verify certificates] *****************************************************
TASK [Gathering Facts] *********************************************************
Thursday 18 August 2022 22:01:25 +0000 (0:00:05.025) 0:09:18.189 *******
ok: [sut]
TASK [Verify each certificate] *************************************************
Thursday 18 August 2022 22:01:26 +0000 (0:00:00.747) 0:09:18.937 *******
included: /WORKDIR/dist-git-certificate-use_distro_python_cryptography-GEkvSr/tests/tasks/assert_certificate_parameters.yml for sut => (item={'path': '/etc/pki/tls/certs/mycert_basic_ipa.crt', 'key_path': '/etc/pki/tls/private/mycert_basic_ipa.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']})
included: /WORKDIR/dist-git-certificate-use_distro_python_cryptography-GEkvSr/tests/tasks/assert_certificate_parameters.yml for sut => (item={'path': '/etc/pki/tls/certs/groupcert.crt', 'key_path': '/etc/pki/tls/private/groupcert.key', 'owner': 'root', 'group': 'ftp', 'mode': '0640', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']})
TASK [Set virtualenv_path] *****************************************************
Thursday 18 August 2022 22:01:26 +0000 (0:00:00.071) 0:09:19.008 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
Thursday 18 August 2022 22:01:26 +0000 (0:00:00.086) 0:09:19.094 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
Thursday 18 August 2022 22:01:27 +0000 (0:00:01.195) 0:09:20.290 *******
changed: [sut] => {
"changed": true,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (21.2.3)
Collecting pip
Downloading pip-22.2.2-py3-none-any.whl (2.0 MB)
Installing collected packages: pip
Attempting uninstall: pip
Found existing installation: pip 21.2.3
Uninstalling pip-21.2.3:
Successfully uninstalled pip-21.2.3
Successfully installed pip-22.2.2
TASK [Ensure Python's cryptography is installed] *******************************
Thursday 18 August 2022 22:01:34 +0000 (0:00:06.678) 0:09:26.968 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install certreader] ******************************************************
Thursday 18 August 2022 22:01:35 +0000 (0:00:01.171) 0:09:28.139 *******
changed: [sut] => {
"changed": true,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"certreader>=0.1.1"
],
"name": [
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Collecting certreader>=0.1.1
Downloading certreader-0.1.1.tar.gz (4.4 kB)
Preparing metadata (setup.py): started
Preparing metadata (setup.py): finished with status 'done'
Collecting cryptography
Downloading cryptography-37.0.4-cp36-abi3-manylinux_2_24_x86_64.whl (4.1 MB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.1/4.1 MB 27.5 MB/s eta 0:00:00
Collecting pyasn1
Downloading pyasn1-0.4.8-py2.py3-none-any.whl (77 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 77.1/77.1 kB 14.9 MB/s eta 0:00:00
Collecting pyyaml
Downloading PyYAML-6.0-cp39-cp39-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (661 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 661.8/661.8 kB 39.3 MB/s eta 0:00:00
Collecting cffi>=1.12
Downloading cffi-1.15.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (441 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 441.2/441.2 kB 40.1 MB/s eta 0:00:00
Collecting pycparser
Downloading pycparser-2.21-py2.py3-none-any.whl (118 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 118.7/118.7 kB 19.6 MB/s eta 0:00:00
Using legacy 'setup.py install' for certreader, since package 'wheel' is not installed.
Installing collected packages: pyasn1, pyyaml, pycparser, cffi, cryptography, certreader
Running setup.py install for certreader: started
Running setup.py install for certreader: finished with status 'done'
Successfully installed certreader-0.1.1 cffi-1.15.1 cryptography-37.0.4 pyasn1-0.4.8 pycparser-2.21 pyyaml-6.0
TASK [Retrieve certificate file stats] *****************************************
Thursday 18 August 2022 22:01:39 +0000 (0:00:03.600) 0:09:31.740 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1660860083.3434162,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "6e299bb93b11c892874f9cbedf47d0218781c63b",
"ctime": 1660860083.3404162,
"dev": 51716,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 17525479,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1660860083.3404162,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_basic_ipa.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1854,
"uid": 0,
"version": "2323301470",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
Thursday 18 August 2022 22:01:39 +0000 (0:00:00.475) 0:09:32.215 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
Thursday 18 August 2022 22:01:39 +0000 (0:00:00.052) 0:09:32.268 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
Thursday 18 August 2022 22:01:39 +0000 (0:00:00.072) 0:09:32.341 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
Thursday 18 August 2022 22:01:39 +0000 (0:00:00.071) 0:09:32.412 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1660860081.569457,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "135d594f3257cfab31be0756411cb2df4db29c40",
"ctime": 1660860083.3404162,
"dev": 51716,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 9359305,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1660860083.3404162,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_basic_ipa.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "560102603",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.301) 0:09:32.714 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.050) 0:09:32.765 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.072) 0:09:32.838 *******
ok: [sut] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/mycert_basic_ipa.crt"
],
"delta": "0:00:00.285791",
"end": "2022-08-18 22:01:40.699942",
"rc": 0,
"start": "2022-08-18 22:01:40.414151"
}
STDOUT:
{
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"extensions": {
"authorityKeyIdentifier": {
"value": "B0:54:60:6F:1F:9D:80:14:BB:96:1A:66:51:22:EB:E7:12:E4:03:69",
"critical": false
},
"authorityInfoAccess": {
"value": [
{
"method": "OCSP",
"location": "http://ipa-ca.test.local/ca/ocsp"
}
],
"critical": false
},
"keyUsage": {
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
],
"critical": true
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"cRLDistributionPoints": {
"value": [
{
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
],
"crl_issuer": [
{
"organizationName": "ipaca",
"commonName": "Certificate Authority"
}
]
}
],
"critical": false
},
"subjectKeyIdentifier": {
"value": "69:EE:16:47:B9:17:26:09:12:E2:59:A7:AD:B9:36:AD:03:68:5E:E0",
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL",
"oid": "1.3.6.1.4.1.311.20.2.3"
},
{
"name": "Kerberos principalname",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL",
"oid": "1.3.6.1.5.2.2"
}
],
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2024-08-18 22:01:23",
"not_valid_before": "2022-08-18 22:01:23"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.574) 0:09:33.412 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityInfoAccess": {
"critical": false,
"value": [
{
"location": "http://ipa-ca.test.local/ca/ocsp",
"method": "OCSP"
}
]
},
"authorityKeyIdentifier": {
"critical": false,
"value": "B0:54:60:6F:1F:9D:80:14:BB:96:1A:66:51:22:EB:E7:12:E4:03:69"
},
"cRLDistributionPoints": {
"critical": false,
"value": [
{
"crl_issuer": [
{
"commonName": "Certificate Authority",
"organizationName": "ipaca"
}
],
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
]
}
]
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": true,
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"oid": "1.3.6.1.4.1.311.20.2.3",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
},
{
"name": "Kerberos principalname",
"oid": "1.3.6.1.5.2.2",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "69:EE:16:47:B9:17:26:09:12:E2:59:A7:AD:B9:36:AD:03:68:5E:E0"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"validity": {
"not_valid_after": "2024-08-18 22:01:23",
"not_valid_before": "2022-08-18 22:01:23"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.068) 0:09:33.481 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.071) 0:09:33.553 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
Thursday 18 August 2022 22:01:40 +0000 (0:00:00.053) 0:09:33.607 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
Thursday 18 August 2022 22:01:41 +0000 (0:00:00.072) 0:09:33.679 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
Thursday 18 August 2022 22:01:41 +0000 (0:00:00.071) 0:09:33.751 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
Thursday 18 August 2022 22:01:41 +0000 (0:00:00.070) 0:09:33.821 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_basic_ipa.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.083531",
"end": "2022-08-18 22:01:41.478282",
"rc": 0,
"start": "2022-08-18 22:01:41.394751"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
Thursday 18 August 2022 22:01:41 +0000 (0:00:00.369) 0:09:34.191 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
Thursday 18 August 2022 22:01:41 +0000 (0:00:00.070) 0:09:34.261 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
Thursday 18 August 2022 22:01:41 +0000 (0:00:00.046) 0:09:34.308 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
Thursday 18 August 2022 22:01:42 +0000 (0:00:01.155) 0:09:35.464 *******
ok: [sut] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.2.2)
TASK [Ensure Python's cryptography is installed] *******************************
Thursday 18 August 2022 22:01:43 +0000 (0:00:01.143) 0:09:36.607 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install certreader] ******************************************************
Thursday 18 August 2022 22:01:45 +0000 (0:00:01.172) 0:09:37.779 *******
ok: [sut] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"certreader>=0.1.1"
],
"name": [
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1)
Requirement already satisfied: cryptography in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (37.0.4)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography->certreader>=0.1.1) (1.15.1)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography->certreader>=0.1.1) (2.21)
TASK [Retrieve certificate file stats] *****************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.952) 0:09:38.731 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1660860085.3293705,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "742767e46ae658d3f185c154050ddd7f32ccc3d1",
"ctime": 1660860085.4263682,
"dev": 51716,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 16812834,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1660860085.3263707,
"nlink": 1,
"path": "/etc/pki/tls/certs/groupcert.crt",
"pw_name": "root",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1854,
"uid": 0,
"version": "1270101245",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.297) 0:09:39.029 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.050) 0:09:39.080 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.074) 0:09:39.154 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.072) 0:09:39.226 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1660860084.311394,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "a3a1bd2dfefd8eb81a3b5122d3fe846ecc4f2103",
"ctime": 1660860085.4273684,
"dev": 51716,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 9359306,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1660860085.3263707,
"nlink": 1,
"path": "/etc/pki/tls/private/groupcert.key",
"pw_name": "root",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1708,
"uid": 0,
"version": "677348995",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.303) 0:09:39.530 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.055) 0:09:39.586 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
Thursday 18 August 2022 22:01:46 +0000 (0:00:00.079) 0:09:39.666 *******
ok: [sut] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/groupcert.crt"
],
"delta": "0:00:00.276592",
"end": "2022-08-18 22:01:47.522975",
"rc": 0,
"start": "2022-08-18 22:01:47.246383"
}
STDOUT:
{
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"extensions": {
"authorityKeyIdentifier": {
"value": "B0:54:60:6F:1F:9D:80:14:BB:96:1A:66:51:22:EB:E7:12:E4:03:69",
"critical": false
},
"authorityInfoAccess": {
"value": [
{
"method": "OCSP",
"location": "http://ipa-ca.test.local/ca/ocsp"
}
],
"critical": false
},
"keyUsage": {
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
],
"critical": true
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"cRLDistributionPoints": {
"value": [
{
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
],
"crl_issuer": [
{
"organizationName": "ipaca",
"commonName": "Certificate Authority"
}
]
}
],
"critical": false
},
"subjectKeyIdentifier": {
"value": "F2:C5:8E:E6:5B:A1:A0:63:CE:04:15:4F:4E:69:86:1D:4E:6C:8A:C5",
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL",
"oid": "1.3.6.1.4.1.311.20.2.3"
},
{
"name": "Kerberos principalname",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL",
"oid": "1.3.6.1.5.2.2"
}
],
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2024-08-18 22:01:25",
"not_valid_before": "2022-08-18 22:01:25"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.570) 0:09:40.236 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityInfoAccess": {
"critical": false,
"value": [
{
"location": "http://ipa-ca.test.local/ca/ocsp",
"method": "OCSP"
}
]
},
"authorityKeyIdentifier": {
"critical": false,
"value": "B0:54:60:6F:1F:9D:80:14:BB:96:1A:66:51:22:EB:E7:12:E4:03:69"
},
"cRLDistributionPoints": {
"critical": false,
"value": [
{
"crl_issuer": [
{
"commonName": "Certificate Authority",
"organizationName": "ipaca"
}
],
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
]
}
]
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": true,
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"oid": "1.3.6.1.4.1.311.20.2.3",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
},
{
"name": "Kerberos principalname",
"oid": "1.3.6.1.5.2.2",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "F2:C5:8E:E6:5B:A1:A0:63:CE:04:15:4F:4E:69:86:1D:4E:6C:8A:C5"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"validity": {
"not_valid_after": "2024-08-18 22:01:25",
"not_valid_before": "2022-08-18 22:01:25"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.067) 0:09:40.304 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.071) 0:09:40.375 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.051) 0:09:40.427 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.069) 0:09:40.496 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.103) 0:09:40.599 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
Thursday 18 August 2022 22:01:47 +0000 (0:00:00.074) 0:09:40.674 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/groupcert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.083282",
"end": "2022-08-18 22:01:48.333888",
"rc": 0,
"start": "2022-08-18 22:01:48.250606"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
Thursday 18 August 2022 22:01:48 +0000 (0:00:00.370) 0:09:41.044 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
PLAY RECAP *********************************************************************
sut : ok=101 changed=33 unreachable=0 failed=0 skipped=34 rescued=0 ignored=0
Thursday 18 August 2022 22:01:48 +0000 (0:00:00.114) 0:09:41.159 *******
===============================================================================
ipaserver : Install - Setup CA ---------------------------------------- 239.48s
ipaserver : Install - Ensure that IPA server packages are installed --- 105.81s
ipaserver : Install - Setup HTTP --------------------------------------- 41.63s
ipaserver : Install - Enable IPA --------------------------------------- 32.02s
ipaserver : Install - Setup DS ----------------------------------------- 18.71s
ipaserver : Install - Setup DNS ---------------------------------------- 17.49s
ipaserver : Install - Setup ADTRUST ------------------------------------ 14.46s
ipaserver : Install - Setup KRB ----------------------------------------- 7.93s
ipaserver : Install - Setup NTP ----------------------------------------- 7.85s
Install the package, force upgrade -------------------------------------- 6.68s
ipaserver : Install - Ensure that IPA server packages for dns are installed --- 6.64s
ipaclient : Install - Create IPA NSS database --------------------------- 6.34s
ipaserver : Install - Setup custodia ------------------------------------ 5.88s
linux-system-roles.certificate : Ensure certificate requests ------------ 5.03s
Install certreader ------------------------------------------------------ 3.60s
ipaserver : Install - Setup otpd ---------------------------------------- 3.38s
ipaclient : Install - IPA API calls for remaining enrollment parts ------ 3.00s
Ensure nss package is up-to-date ---------------------------------------- 2.82s
ipaserver : Install - Set DS password ----------------------------------- 2.81s
ipaserver : Install - Server preparation -------------------------------- 2.68s
---^---^---^---^---^---
# STDERR:
---v---v---v---v---v---
[DEPRECATION WARNING]: [defaults]callback_whitelist option, normalizing names
to new standard, use callbacks_enabled instead. This feature will be removed
from ansible-core in version 2.15. Deprecation warnings can be disabled by
setting deprecation_warnings=False in ansible.cfg.
---^---^---^---^---^---