ansible-playbook [core 2.17.8]
config file = None
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/local/lib/python3.12/site-packages/ansible
ansible collection location = /tmp/collections-ZIH
executable location = /usr/local/bin/ansible-playbook
python version = 3.12.8 (main, Dec 6 2024, 00:00:00) [GCC 14.2.1 20240912 (Red Hat 14.2.1-3)] (/usr/bin/python3.12)
jinja version = 3.1.5
libyaml = True
No config file found; using defaults
running playbook inside collection fedora.linux_system_roles
statically imported: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.debug to ansible.posix.debug
redirecting (type: callback) ansible.builtin.profile_tasks to ansible.posix.profile_tasks
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_basic_ipa.yml **************************************************
1 plays in /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml
PLAY [Test using IPA to issue certs] *******************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:2
Saturday 15 February 2025 07:27:53 -0500 (0:00:00.010) 0:00:00.010 *****
[WARNING]: Platform linux on host managed-node1 is using the discovered Python
interpreter at /usr/bin/python3.12, but future installation of another Python
interpreter could change the meaning of that path. See
https://docs.ansible.com/ansible-
core/2.17/reference_appendices/interpreter_discovery.html for more information.
ok: [managed-node1]
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:13
Saturday 15 February 2025 07:27:56 -0500 (0:00:02.722) 0:00:02.732 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [Skip if not supported] ***************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:18
Saturday 15 February 2025 07:27:56 -0500 (0:00:00.526) 0:00:03.258 *****
META: end_host conditional evaluated to False, continuing execution for managed-node1
skipping: [managed-node1] => {
"skip_reason": "end_host conditional evaluated to False, continuing execution for managed-node1"
}
MSG:
end_host conditional evaluated to false, continuing execution for managed-node1
TASK [Set __is_beaker_env] *****************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:2
Saturday 15 February 2025 07:27:56 -0500 (0:00:00.007) 0:00:03.266 *****
ok: [managed-node1] => {
"ansible_facts": {
"__is_beaker_env": false
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:9
Saturday 15 February 2025 07:27:56 -0500 (0:00:00.042) 0:00:03.309 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:14
Saturday 15 February 2025 07:27:57 -0500 (0:00:00.428) 0:00:03.737 *****
ok: [managed-node1] => {
"ansible_facts": {
"__certificate_is_ostree": false
},
"changed": false
}
TASK [Install ansible-freeipa] *************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:18
Saturday 15 February 2025 07:27:57 -0500 (0:00:00.053) 0:00:03.790 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__is_beaker_env",
"skip_reason": "Conditional result was False"
}
TASK [Ensure freeipa-repo is absent] *******************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:24
Saturday 15 February 2025 07:27:57 -0500 (0:00:00.024) 0:00:03.815 *****
ok: [managed-node1 -> 127.0.0.1] => {
"changed": false,
"path": "/tmp/freeipa-repo/",
"state": "absent"
}
TASK [Clone ansible-freeipa repo] **********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:32
Saturday 15 February 2025 07:27:57 -0500 (0:00:00.561) 0:00:04.377 *****
changed: [managed-node1 -> 127.0.0.1] => {
"after": "feb33e4e3a4832c84724baa85ad51fee391bc995",
"before": null,
"changed": true
}
TASK [Create role symlinks] ****************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:41
Saturday 15 February 2025 07:27:58 -0500 (0:00:01.124) 0:00:05.502 *****
changed: [managed-node1 -> 127.0.0.1] => (item=ipaserver) => {
"ansible_loop_var": "item",
"changed": true,
"dest": "/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/roles/ipaserver",
"gid": 0,
"group": "root",
"item": "ipaserver",
"mode": "0777",
"owner": "root",
"secontext": "unconfined_u:object_r:user_tmp_t:s0",
"size": 34,
"src": "/tmp/freeipa-repo/roles/ipaserver/",
"state": "link",
"uid": 0
}
changed: [managed-node1 -> 127.0.0.1] => (item=ipaclient) => {
"ansible_loop_var": "item",
"changed": true,
"dest": "/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/roles/ipaclient",
"gid": 0,
"group": "root",
"item": "ipaclient",
"mode": "0777",
"owner": "root",
"secontext": "unconfined_u:object_r:user_tmp_t:s0",
"size": 34,
"src": "/tmp/freeipa-repo/roles/ipaclient/",
"state": "link",
"uid": 0
}
TASK [Ensure hostname package is installed] ************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:53
Saturday 15 February 2025 07:27:59 -0500 (0:00:00.795) 0:00:06.297 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: hostname
TASK [Set hostname] ************************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:59
Saturday 15 February 2025 07:28:12 -0500 (0:00:13.140) 0:00:19.437 *****
changed: [managed-node1] => {
"ansible_facts": {
"ansible_domain": "test.local",
"ansible_fqdn": "ipaserver.test.local",
"ansible_hostname": "ipaserver",
"ansible_nodename": "ipaserver.test.local"
},
"changed": true,
"name": "ipaserver.test.local"
}
TASK [Ensure nss package is up-to-date] ****************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:65
Saturday 15 February 2025 07:28:13 -0500 (0:00:00.871) 0:00:20.309 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: nss
TASK [Sanitize /etc/hosts] *****************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:72
Saturday 15 February 2025 07:28:15 -0500 (0:00:01.464) 0:00:21.773 *****
changed: [managed-node1] => {
"backup": "",
"changed": true,
"found": 1
}
MSG:
1 line(s) removed
TASK [Add host to /etc/hosts] **************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:83
Saturday 15 February 2025 07:28:15 -0500 (0:00:00.492) 0:00:22.265 *****
changed: [managed-node1] => {
"backup": "",
"changed": true
}
MSG:
line added
TASK [See if collection exists] ************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:111
Saturday 15 February 2025 07:28:16 -0500 (0:00:00.400) 0:00:22.665 *****
ok: [managed-node1 -> localhost] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [Set name of ipa server role] *********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:117
Saturday 15 February 2025 07:28:16 -0500 (0:00:00.227) 0:00:22.893 *****
ok: [managed-node1] => {
"ansible_facts": {
"__ipa_server_role": "ipaserver"
},
"changed": false
}
TASK [Include ipaserver role] **************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:121
Saturday 15 February 2025 07:28:16 -0500 (0:00:00.020) 0:00:22.913 *****
included: ipaserver for managed-node1
TASK [ipaserver : Import variables specific to distribution] *******************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/main.yml:4
Saturday 15 February 2025 07:28:16 -0500 (0:00:00.030) 0:00:22.944 *****
ok: [managed-node1] => (item=/tmp/freeipa-repo/roles/ipaserver/vars/Fedora.yml) => {
"ansible_facts": {
"ipaserver_packages": [
"freeipa-server",
"python3-libselinux"
],
"ipaserver_packages_adtrust": [
"freeipa-server-trust-ad"
],
"ipaserver_packages_dns": [
"freeipa-server-dns"
],
"ipaserver_packages_firewalld": [
"firewalld"
]
},
"ansible_included_var_files": [
"/tmp/freeipa-repo/roles/ipaserver/vars/Fedora.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "/tmp/freeipa-repo/roles/ipaserver/vars/Fedora.yml"
}
TASK [ipaserver : Install IPA server] ******************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/main.yml:19
Saturday 15 February 2025 07:28:16 -0500 (0:00:00.030) 0:00:22.974 *****
included: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml for managed-node1
TASK [ipaserver : Install - Ensure that IPA server packages are installed] *****
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:7
Saturday 15 February 2025 07:28:16 -0500 (0:00:00.076) 0:00:23.050 *****
changed: [managed-node1] => {
"changed": true,
"rc": 0,
"results": [
"Installed: python3-decorator-5.1.1-9.fc40.noarch",
"Installed: libunwind-1.8.0-3.fc40.x86_64",
"Installed: gdk-pixbuf2-2.42.10-8.fc40.x86_64",
"Installed: python3-deprecated-1.2.14-5.fc40.noarch",
"Installed: gdk-pixbuf2-modules-2.42.10-8.fc40.x86_64",
"Installed: pango-1.54.0-1.fc40.x86_64",
"Installed: acl-2.3.2-1.fc40.x86_64",
"Installed: harfbuzz-8.5.0-1.fc40.x86_64",
"Installed: geoclue2-2.7.2-2.fc40.x86_64",
"Installed: libwayland-client-1.23.0-2.fc40.x86_64",
"Installed: libwayland-cursor-1.23.0-2.fc40.x86_64",
"Installed: libwayland-egl-1.23.0-2.fc40.x86_64",
"Installed: libwayland-server-1.23.0-2.fc40.x86_64",
"Installed: libusbmuxd-2.0.2^20230620git8d30a55-5.fc40.x86_64",
"Installed: libwbclient-2:4.20.7-1.fc40.x86_64",
"Installed: libwebp-1.5.0-1.fc40.x86_64",
"Installed: libcanberra-0.30-35.fc40.x86_64",
"Installed: poppler-24.02.0-2.fc40.x86_64",
"Installed: libcanberra-gtk3-0.30-35.fc40.x86_64",
"Installed: poppler-data-0.4.11-7.fc40.noarch",
"Installed: highway-1.2.0-2.fc40.x86_64",
"Installed: poppler-glib-24.02.0-2.fc40.x86_64",
"Installed: libxcb-1.17.0-2.fc40.x86_64",
"Installed: libxshmfence-1.3.2-5.fc40.x86_64",
"Installed: httpd-2.4.62-2.fc40.x86_64",
"Installed: httpd-core-2.4.62-2.fc40.x86_64",
"Installed: httpd-filesystem-2.4.62-2.fc40.noarch",
"Installed: httpd-tools-2.4.62-2.fc40.x86_64",
"Installed: iso-codes-4.16.0-3.fc40.noarch",
"Installed: hwdata-0.392-1.fc40.noarch",
"Installed: gpgmepp-1.23.2-3.fc40.x86_64",
"Installed: python3-dogtag-pki-11.5.0-3.fc40.noarch",
"Installed: libcloudproviders-0.3.5-3.fc40.x86_64",
"Installed: cyrus-sasl-gssapi-2.1.28-19.fc40.x86_64",
"Installed: cyrus-sasl-md5-2.1.28-19.fc40.x86_64",
"Installed: cyrus-sasl-plain-2.1.28-19.fc40.x86_64",
"Installed: jackson-annotations-2.16.1-3.fc40.noarch",
"Installed: libvisual-1:0.4.1-4.fc40.x86_64",
"Installed: jackson-core-2.16.1-4.fc40.noarch",
"Installed: jackson-databind-2.16.1-4.fc40.noarch",
"Installed: jackson-jaxrs-json-provider-2.16.1-3.fc40.noarch",
"Installed: jackson-jaxrs-providers-2.16.1-3.fc40.noarch",
"Installed: jackson-module-jaxb-annotations-2.16.1-3.fc40.noarch",
"Installed: libvmaf-2.3.0-7.fc40.x86_64",
"Installed: jakarta-activation-2.1.2-6.fc40.noarch",
"Installed: perl-Text-Diff-1.45-21.fc40.noarch",
"Installed: llvm-libs-18.1.8-4.fc40.x86_64",
"Installed: jakarta-annotations-1.3.5-22.fc40.noarch",
"Installed: libvorbis-1:1.3.7-10.fc40.x86_64",
"Installed: opus-1.5.1-1.fc40.x86_64",
"Installed: cups-filesystem-1:2.4.11-9.fc40.noarch",
"Installed: cups-libs-1:2.4.11-9.fc40.x86_64",
"Installed: wireplumber-0.5.7-1.fc40.x86_64",
"Installed: graphene-1.10.6-8.fc40.x86_64",
"Installed: wireplumber-libs-0.5.7-1.fc40.x86_64",
"Installed: graphite2-1.3.14-15.fc40.x86_64",
"Installed: libcue-2.3.0-3.fc40.x86_64",
"Installed: perl-Devel-Peek-1.33-507.fc40.x86_64",
"Installed: python3-policycoreutils-3.7-7.fc40.noarch",
"Installed: libX11-1.8.10-2.fc40.x86_64",
"Installed: libX11-common-1.8.10-2.fc40.noarch",
"Installed: python3-pyasn1-0.6.0-1.fc40.noarch",
"Installed: python3-pyasn1-modules-0.6.0-1.fc40.noarch",
"Installed: slapi-nis-0.60.0-5.fc40.x86_64",
"Installed: osinfo-db-tools-1.11.0-5.fc40.x86_64",
"Installed: libX11-xcb-1.8.10-2.fc40.x86_64",
"Installed: webp-pixbuf-loader-0.2.7-1.fc40.x86_64",
"Installed: webrtc-audio-processing-1.3-1.fc40.x86_64",
"Installed: slf4j-1.7.32-12.fc40.noarch",
"Installed: slf4j-jdk14-1.7.32-12.fc40.noarch",
"Installed: libXi-1.8.2-1.fc40.x86_64",
"Installed: libXtst-1.2.5-1.fc40.x86_64",
"Installed: libdatrie-0.2.13-9.fc40.x86_64",
"Installed: cairo-1.18.0-3.fc40.x86_64",
"Installed: dbus-tools-1:1.14.10-3.fc40.x86_64",
"Installed: xdg-desktop-portal-1.18.4-1.fc40.x86_64",
"Installed: libnotify-0.8.3-3.fc40.x86_64",
"Installed: cairo-gobject-1.18.0-3.fc40.x86_64",
"Installed: libaom-3.9.0-1.fc40.x86_64",
"Installed: dconf-0.40.0-12.fc40.x86_64",
"Installed: fdk-aac-free-2.0.0-13.fc40.x86_64",
"Installed: python3-pyusb-1.3.1-1.fc40.noarch",
"Installed: libavif-1.0.4-3.fc40.x86_64",
"Installed: gsm-1.0.22-6.fc40.x86_64",
"Installed: python3-qrcode-7.4.2-12.fc40.noarch",
"Installed: fedora-logos-httpd-38.1.0-5.fc40.noarch",
"Installed: perl-Term-ReadLine-1.17-507.fc40.noarch",
"Installed: libogg-2:1.3.5-8.fc40.x86_64",
"Installed: java-17-openjdk-headless-1:17.0.13.0.11-3.fc40.x86_64",
"Installed: javapackages-filesystem-6.2.0-9.fc40.noarch",
"Installed: perl-IO-Compress-2.207-1.fc40.noarch",
"Installed: javapackages-tools-6.2.0-9.fc40.noarch",
"Installed: perl-IO-Compress-Lzma-2.207-1.fc40.noarch",
"Installed: perl-Tie-4.6-507.fc40.noarch",
"Installed: java-21-openjdk-1:21.0.6.0.7-1.fc40.x86_64",
"Installed: java-21-openjdk-devel-1:21.0.6.0.7-1.fc40.x86_64",
"Installed: java-21-openjdk-headless-1:21.0.6.0.7-1.fc40.x86_64",
"Installed: jaxb-api-4.0.1-5.fc40.noarch",
"Installed: perl-debugger-1.60-507.fc40.noarch",
"Installed: softhsm-2.6.1-9.fc40.x86_64",
"Installed: perl-IO-Zlib-1:1.15-1.fc40.noarch",
"Installed: mesa-dri-drivers-24.1.7-1.fc40.x86_64",
"Installed: mesa-filesystem-24.1.7-1.fc40.x86_64",
"Installed: mesa-libEGL-24.1.7-1.fc40.x86_64",
"Installed: giflib-5.2.2-1.fc40.x86_64",
"Installed: mesa-libGL-24.1.7-1.fc40.x86_64",
"Installed: perl-meta-notation-5.38.3-507.fc40.noarch",
"Installed: jbigkit-libs-2.1-29.fc40.x86_64",
"Installed: perl-sigtrap-1.10-507.fc40.noarch",
"Installed: jboss-jaxrs-2.0-api-1.0.0-27.fc40.noarch",
"Installed: jboss-logging-3.5.3-5.fc40.noarch",
"Installed: jboss-logging-tools-2.2.1-17.fc40.noarch",
"Installed: mesa-libgbm-24.1.7-1.fc40.x86_64",
"Installed: sound-theme-freedesktop-0.8-21.fc40.noarch",
"Installed: python3-gssapi-1.7.3-8.fc40.x86_64",
"Installed: mesa-libglapi-24.1.7-1.fc40.x86_64",
"Installed: mesa-va-drivers-24.1.7-1.fc40.x86_64",
"Installed: words-3.0-45.fc40.noarch",
"Installed: jdeparser-2.0.3-17.fc40.noarch",
"Installed: apache-commons-cli-1.6.0-5.fc40.noarch",
"Installed: apache-commons-codec-1.16.0-7.fc40.noarch",
"Installed: jemalloc-5.3.0-6.fc40.x86_64",
"Installed: julietaula-montserrat-fonts-1:7.222-8.fc40.noarch",
"Installed: libosinfo-1.11.0-5.fc40.x86_64",
"Installed: jxl-pixbuf-loader-1:0.8.4-1.fc40.x86_64",
"Installed: apache-commons-lang3-3.14.0-5.fc40.noarch",
"Installed: apache-commons-logging-1.3.0-5.fc40.noarch",
"Installed: apache-commons-net-3.10.0-5.fc40.noarch",
"Installed: adwaita-cursor-theme-46.2-2.fc40.noarch",
"Installed: adwaita-icon-theme-46.2-2.fc40.noarch",
"Installed: adwaita-icon-theme-legacy-46.2-1.fc40.noarch",
"Installed: cdparanoia-libs-10.2-44.fc40.x86_64",
"Installed: python3-sss-2.9.6-1.fc40.x86_64",
"Installed: python3-sss-murmur-2.9.6-1.fc40.x86_64",
"Installed: python3-sssdconfig-2.9.6-1.fc40.noarch",
"Installed: samba-client-libs-2:4.20.7-1.fc40.x86_64",
"Installed: samba-common-2:4.20.7-1.fc40.noarch",
"Installed: samba-common-libs-2:4.20.7-1.fc40.x86_64",
"Installed: libepoxy-1.5.10-6.fc40.x86_64",
"Installed: libpciaccess-0.16-12.fc40.x86_64",
"Installed: python3-ifaddr-0.1.7-13.fc40.noarch",
"Installed: apr-util-1.6.3-16.fc40.x86_64",
"Installed: apr-util-lmdb-1.6.3-16.fc40.x86_64",
"Installed: alsa-lib-1.2.13-3.fc40.x86_64",
"Installed: apr-util-openssl-1.6.3-16.fc40.x86_64",
"Installed: certmonger-0.79.19-5.fc40.x86_64",
"Installed: libdav1d-1.5.1-1.fc40.x86_64",
"Installed: libdb-5.3.28-62.fc40.x86_64",
"Installed: python3-typing-extensions-4.12.2-2.fc40.noarch",
"Installed: pipewire-1.0.9-2.fc40.x86_64",
"Installed: pipewire-alsa-1.0.9-2.fc40.x86_64",
"Installed: pipewire-jack-audio-connection-kit-1.0.9-2.fc40.x86_64",
"Installed: pipewire-jack-audio-connection-kit-libs-1.0.9-2.fc40.x86_64",
"Installed: pipewire-libs-1.0.9-2.fc40.x86_64",
"Installed: libexif-0.6.24-7.fc40.x86_64",
"Installed: libplist-2.3.0-4.fc40.x86_64",
"Installed: perl-threads-1:2.36-503.fc40.x86_64",
"Installed: perl-threads-shared-1.68-502.fc40.x86_64",
"Installed: pipewire-pulseaudio-1.0.9-2.fc40.x86_64",
"Installed: pixman-0.43.4-1.fc40.x86_64",
"Installed: python3-wrapt-1.17.1-1.fc40.x86_64",
"Installed: libpng-2:1.6.40-3.fc40.x86_64",
"Installed: libdrm-2.4.123-1.fc40.x86_64",
"Installed: lksctp-tools-1.0.19-6.fc40.x86_64",
"Installed: apache-commons-io-1:2.16.1-1.fc40.noarch",
"Installed: flac-libs-1.4.3-4.fc40.x86_64",
"Installed: xdg-desktop-portal-gtk-1.15.1-5.fc40.x86_64",
"Installed: apr-1.7.5-1.fc40.x86_64",
"Installed: totem-pl-parser-3.26.6-9.fc40.x86_64",
"Installed: sscg-3.0.5-6.fc40.x86_64",
"Installed: python3-jwcrypto-1.4.2-9.fc40.noarch",
"Installed: libfontenc-1.1.7-3.fc40.x86_64",
"Installed: lame-libs-3.100-17.fc40.x86_64",
"Installed: libgexiv2-0.14.3-1.fc40.x86_64",
"Installed: lm_sensors-libs-3.6.0-18.fc40.x86_64",
"Installed: dogtag-jss-5.5.0-1.fc40.1.x86_64",
"Installed: dogtag-jss-tomcat-5.5.0-1.fc40.1.x86_64",
"Installed: dogtag-ldapjdk-5.5.0-2.fc40.noarch",
"Installed: python3-ldap-3.4.4-3.fc40.x86_64",
"Installed: dogtag-pki-acme-11.5.0-3.fc40.noarch",
"Installed: dogtag-pki-base-11.5.0-3.fc40.noarch",
"Installed: dogtag-pki-ca-11.5.0-3.fc40.noarch",
"Installed: dogtag-pki-java-11.5.0-3.fc40.noarch",
"Installed: dogtag-pki-kra-11.5.0-3.fc40.noarch",
"Installed: dogtag-pki-server-11.5.0-3.fc40.noarch",
"Installed: perl-Algorithm-Diff-1.2010-11.fc40.noarch",
"Installed: dogtag-pki-tools-11.5.0-3.fc40.x86_64",
"Installed: mod_http2-2.0.29-1.fc40.x86_64",
"Installed: mod_lua-2.4.62-2.fc40.x86_64",
"Installed: augeas-libs-1.14.2-0.1.20240903git2de06e0.fc40.x86_64",
"Installed: libgsf-1.14.53-2.fc40.x86_64",
"Installed: mod_session-2.4.62-2.fc40.x86_64",
"Installed: mod_ssl-1:2.4.62-2.fc40.x86_64",
"Installed: ttmkfdir-3.0.9-70.fc40.x86_64",
"Installed: logrotate-3.21.0-6.fc40.x86_64",
"Installed: policycoreutils-3.7-7.fc40.x86_64",
"Installed: autofs-1:5.1.9-7.fc40.x86_64",
"Installed: policycoreutils-python-utils-3.7-7.fc40.noarch",
"Installed: avif-pixbuf-loader-1.0.4-3.fc40.x86_64",
"Installed: xml-common-0.6.3-63.fc40.noarch",
"Installed: xml-commons-apis-1.4.01-46.fc40.noarch",
"Installed: xml-commons-resolver-1.2-44.fc40.noarch",
"Installed: low-memory-monitor-2.1-10.fc40.x86_64",
"Installed: mpg123-libs-1.32.9-1.fc40.x86_64",
"Installed: sssd-common-pac-2.9.6-1.fc40.x86_64",
"Installed: sssd-dbus-2.9.6-1.fc40.x86_64",
"Installed: sssd-idp-2.9.6-1.fc40.x86_64",
"Installed: sssd-ipa-2.9.6-1.fc40.x86_64",
"Installed: libipa_hbac-2.9.6-1.fc40.x86_64",
"Installed: sssd-krb5-2.9.6-1.fc40.x86_64",
"Installed: sssd-krb5-common-2.9.6-1.fc40.x86_64",
"Installed: sssd-passkey-2.9.6-1.fc40.x86_64",
"Installed: sssd-tools-2.9.6-1.fc40.x86_64",
"Installed: fontawesome4-fonts-1:4.7.0-22.fc40.noarch",
"Installed: perl-Archive-Tar-3.02-6.fc40.noarch",
"Installed: libjose-14-1.fc40.x86_64",
"Installed: at-spi2-atk-2.52.0-1.fc40.x86_64",
"Installed: lua-5.4.6-5.fc40.x86_64",
"Installed: libjxl-1:0.8.4-1.fc40.x86_64",
"Installed: at-spi2-core-2.52.0-1.fc40.x86_64",
"Installed: libkadm5-1.21.3-3.fc40.x86_64",
"Installed: hicolor-icon-theme-0.17-18.fc40.noarch",
"Installed: uchardet-0.0.8-5.fc40.x86_64",
"Installed: atk-2.52.0-1.fc40.x86_64",
"Installed: libglvnd-1:1.7.0-4.fc40.x86_64",
"Installed: libglvnd-egl-1:1.7.0-4.fc40.x86_64",
"Installed: libglvnd-glx-1:1.7.0-4.fc40.x86_64",
"Installed: lua-posix-36.2.1-6.fc40.x86_64",
"Installed: xorg-x11-fonts-Type1-7.5-38.fc40.noarch",
"Installed: publicsuffix-list-20250116-1.fc40.noarch",
"Installed: svt-av1-libs-2.1.0-4.fc40.x86_64",
"Installed: pulseaudio-libs-16.1-8.fc40.x86_64",
"Installed: python3-mod_wsgi-5.0.0-1.fc40.x86_64",
"Installed: liblc3-1.1.1-1.fc40.x86_64",
"Installed: bind-libs-32:9.18.28-2.fc40.x86_64",
"Installed: bind-utils-32:9.18.28-2.fc40.x86_64",
"Installed: python3-yubico-1.3.3-15.fc40.noarch",
"Installed: xprop-1.2.7-1.fc40.x86_64",
"Installed: httpcomponents-client-4.5.14-8.fc40.noarch",
"Installed: httpcomponents-core-4.4.16-8.fc40.noarch",
"Installed: libgrss-0.7.0-19.fc40.x86_64",
"Installed: lcms2-2.16-3.fc40.x86_64",
"Installed: freetype-2.13.2-5.fc40.x86_64",
"Installed: python3-netaddr-0.10.1-4.fc40.noarch",
"Installed: avahi-glib-0.8-26.fc40.x86_64",
"Installed: libsbc-2.0-4.fc40.x86_64",
"Installed: rtkit-0.11-63.fc40.x86_64",
"Installed: fstrm-0.6.1-10.fc40.x86_64",
"Installed: ecj-1:4.23-9.fc40.noarch",
"Installed: bluez-libs-5.79-1.fc40.x86_64",
"Installed: libgxps-0.3.2-8.fc40.x86_64",
"Installed: mkfontscale-1.2.2-6.fc40.x86_64",
"Installed: fuse-common-3.16.2-3.fc40.x86_64",
"Installed: fuse3-3.16.2-3.fc40.x86_64",
"Installed: fuse3-libs-3.16.2-3.fc40.x86_64",
"Installed: usbmuxd-1.1.1^20230720git61b99ab-2.fc40.x86_64",
"Installed: libicu-74.2-1.fc40.x86_64",
"Installed: python3-augeas-1.1.0-12.fc40.noarch",
"Installed: mod_auth_gssapi-1.6.5-4.fc40.x86_64",
"Installed: colord-libs-1.4.7-3.fc40.x86_64",
"Installed: python3-argcomplete-3.5.3-1.fc40.noarch",
"Installed: libXau-1.0.11-6.fc40.x86_64",
"Installed: perl-Compress-Raw-Bzip2-2.210-1.fc40.x86_64",
"Installed: perl-Compress-Raw-Lzma-2.209-8.fc40.x86_64",
"Installed: perl-Compress-Raw-Zlib-2.209-1.fc40.x86_64",
"Installed: mod_lookup_identity-1.0.0-20.fc40.x86_64",
"Installed: libXcomposite-0.4.6-3.fc40.x86_64",
"Installed: libXcursor-1.2.1-7.fc40.x86_64",
"Installed: libXdamage-1.1.6-3.fc40.x86_64",
"Installed: libimobiledevice-1.3.0^20230705git6fc41f5-4.fc40.x86_64",
"Installed: libXext-1.3.6-1.fc40.x86_64",
"Installed: libimobiledevice-glue-1.0.0-3.fc40.x86_64",
"Installed: libXfixes-6.0.1-3.fc40.x86_64",
"Installed: mailcap-2.1.54-5.fc40.noarch",
"Installed: fontconfig-2.15.0-6.fc40.x86_64",
"Installed: libXft-2.3.8-6.fc40.x86_64",
"Installed: libXinerama-1.1.5-6.fc40.x86_64",
"Installed: nss-tools-3.107.0-1.fc40.x86_64",
"Installed: libXrandr-1.5.4-3.fc40.x86_64",
"Installed: libXrender-0.9.11-6.fc40.x86_64",
"Installed: bash-completion-1:2.11-14.fc40.noarch",
"Installed: freeipa-client-4.12.2-4.fc40.x86_64",
"Installed: freeipa-client-common-4.12.2-4.fc40.noarch",
"Installed: libsoup-2.74.3-6.fc40.x86_64",
"Installed: freeipa-common-4.12.2-4.fc40.noarch",
"Installed: libXv-1.0.12-3.fc40.x86_64",
"Installed: freeipa-healthcheck-core-0.17-2.fc40.noarch",
"Installed: freeipa-selinux-4.12.2-4.fc40.noarch",
"Installed: freeipa-server-4.12.2-4.fc40.x86_64",
"Installed: freeipa-server-common-4.12.2-4.fc40.noarch",
"Installed: libiptcdata-1.0.5-17.fc40.x86_64",
"Installed: libXxf86vm-1.1.5-6.fc40.x86_64",
"Installed: pki-resteasy-client-3.0.26-29.fc40.noarch",
"Installed: pki-resteasy-core-3.0.26-29.fc40.noarch",
"Installed: pki-resteasy-jackson2-provider-3.0.26-29.fc40.noarch",
"Installed: pki-resteasy-servlet-initializer-3.0.26-29.fc40.noarch",
"Installed: tomcat-1:9.0.98-1.fc40.noarch",
"Installed: tomcat-el-3.0-api-1:9.0.98-1.fc40.noarch",
"Installed: tomcat-jsp-2.3-api-1:9.0.98-1.fc40.noarch",
"Installed: tomcat-lib-1:9.0.98-1.fc40.noarch",
"Installed: tomcat-native-1:1.3.0-3.fc40.x86_64",
"Installed: tomcat-servlet-4.0-api-1:9.0.98-1.fc40.noarch",
"Installed: rav1e-libs-0.7.1-4.fc40.x86_64",
"Installed: fribidi-1.0.14-2.fc40.x86_64",
"Installed: open-sans-fonts-1.10-21.fc40.noarch",
"Installed: tracker-3.7.3-1.fc40.x86_64",
"Installed: oddjob-0.34.7-13.fc40.x86_64",
"Installed: oddjob-mkhomedir-0.34.7-13.fc40.x86_64",
"Installed: tracker-miners-3.7.4-2.fc40.x86_64",
"Installed: perl-DB_File-1.859-3.fc40.x86_64",
"Installed: libjpeg-turbo-3.0.2-1.fc40.x86_64",
"Installed: python3-dns-2.6.1-1.fc40.noarch",
"Installed: libstemmer-2.2.0-10.fc40.x86_64",
"Installed: tzdata-java-2025a-1.fc40.noarch",
"Installed: librsvg2-2.57.1-7.fc40.x86_64",
"Installed: openjpeg2-2.5.3-1.fc40.x86_64",
"Installed: python3-ply-3.11-23.fc40.noarch",
"Installed: openldap-clients-2.6.8-2.fc40.x86_64",
"Installed: python3-cffi-1.16.0-4.fc40.x86_64",
"Installed: libasyncns-0.8-28.fc40.x86_64",
"Installed: copy-jdk-configs-4.1-5.fc40.noarch",
"Installed: upower-1.90.7-1.fc40.x86_64",
"Installed: upower-libs-1.90.7-1.fc40.x86_64",
"Installed: libsndfile-1.2.2-4.fc40.x86_64",
"Installed: libthai-0.1.29-8.fc40.x86_64",
"Installed: libtheora-1:1.1.1-36.fc40.x86_64",
"Installed: python3-psutil-5.9.8-1.fc40.x86_64",
"Installed: 389-ds-base-3.0.4-3.fc40.x86_64",
"Installed: 389-ds-base-libs-3.0.4-3.fc40.x86_64",
"Installed: krb5-libs-1.21.3-3.fc40.x86_64",
"Installed: krb5-pkinit-1.21.3-3.fc40.x86_64",
"Installed: krb5-server-1.21.3-3.fc40.x86_64",
"Installed: krb5-workstation-1.21.3-3.fc40.x86_64",
"Installed: libsss_autofs-2.9.6-1.fc40.x86_64",
"Installed: gstreamer1-1.24.11-1.fc40.x86_64",
"Installed: python3-ipaclient-4.12.2-4.fc40.noarch",
"Installed: python3-ipalib-4.12.2-4.fc40.noarch",
"Installed: python3-ipaserver-4.12.2-4.fc40.noarch",
"Installed: openssl-perl-1:3.2.2-3.fc40.x86_64",
"Installed: python3-pycparser-2.20-14.fc40.noarch",
"Installed: gstreamer1-plugins-base-1.24.11-1.fc40.x86_64",
"Installed: libldac-2.0.2.3-15.fc40.x86_64",
"Installed: libtiff-4.6.0-5.fc40.1.x86_64",
"Installed: liblerc-4.0.0-6.fc40.x86_64",
"Installed: python3-kdcproxy-1.0.0-16.fc40.noarch",
"Installed: libtracker-sparql-3.7.3-1.fc40.x86_64",
"Installed: orc-0.4.39-1.fc40.x86_64",
"Installed: gtk-update-icon-cache-3.24.43-1.fc40.x86_64",
"Installed: gtk3-3.24.43-1.fc40.x86_64",
"Installed: python3-cryptography-41.0.7-1.fc40.x86_64",
"Installed: python3-lib389-3.0.4-3.fc40.noarch",
"Installed: libuv-1:1.50.0-1.fc40.x86_64",
"Installed: osinfo-db-20250124-1.fc40.noarch",
"Installed: exempi-2.6.4-5.fc40.x86_64",
"Installed: python3-libipa_hbac-2.9.6-1.fc40.x86_64",
"Installed: exiv2-0.27.6-7.fc40.x86_64",
"Installed: exiv2-libs-0.27.6-7.fc40.x86_64",
"Installed: rsvg-pixbuf-loader-2.57.1-7.fc40.x86_64",
"Removed: policycoreutils-3.7-6.fc40.x86_64",
"Removed: python3-policycoreutils-3.7-6.fc40.noarch",
"Removed: krb5-libs-1.21.3-2.fc40.x86_64"
]
}
TASK [ipaserver : Install - Ensure that IPA server packages for dns are installed] ***
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:12
Saturday 15 February 2025 07:29:33 -0500 (0:01:16.681) 0:01:39.732 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaserver_setup_dns | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Ensure that IPA server packages for adtrust are installed] ***
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:18
Saturday 15 February 2025 07:29:33 -0500 (0:00:00.042) 0:01:39.775 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaserver_setup_adtrust | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Ensure that firewall packages installed] ***********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:24
Saturday 15 February 2025 07:29:33 -0500 (0:00:00.038) 0:01:39.814 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [ipaserver : Firewalld service - Ensure that firewalld is running] ********
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:34
Saturday 15 February 2025 07:29:35 -0500 (0:00:02.074) 0:01:41.888 *****
changed: [managed-node1] => {
"changed": true,
"enabled": true,
"name": "firewalld",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:firewalld_unit_file_t:s0",
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "dbus.socket system.slice sysinit.target dbus-broker.service polkit.service basic.target",
"AllowIsolate": "no",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "shutdown.target network-pre.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedoraproject.FirewallD1",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "[not set]",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "yes",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target ip6tables.service iptables.service nftables.service ipset.service ebtables.service",
"ControlGroupId": "0",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "firewalld - dynamic firewall daemon",
"DevicePolicy": "auto",
"Documentation": "\"man:firewalld(1)\"",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecReloadEx": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/firewalld.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "firewalld.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "mixed",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "0",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "3464151040",
"MemoryCurrent": "[not set]",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "[not set]",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "[not set]",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "[not set]",
"MemoryZSwapCurrent": "[not set]",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "firewalld.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "sysinit.target system.slice dbus.socket",
"Restart": "no",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "100ms",
"RestartUSecNext": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "null",
"StandardInput": "null",
"StandardOutput": "null",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestampMonotonic": "0",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "[not set]",
"TasksMax": "4410",
"TimeoutAbortUSec": "45s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "45s",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "45s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "enabled",
"UnitFileState": "disabled",
"UtmpMode": "init",
"Wants": "network-pre.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "infinity"
}
}
TASK [ipaserver : Firewalld - Verify runtime zone "{{ ipaserver_firewalld_zone }}"] ***
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:40
Saturday 15 February 2025 07:29:37 -0500 (0:00:01.730) 0:01:43.619 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaserver_firewalld_zone is defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Firewalld - Verify permanent zone "{{ ipaserver_firewalld_zone }}"] ***
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:47
Saturday 15 February 2025 07:29:37 -0500 (0:00:00.042) 0:01:43.662 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaserver_firewalld_zone is defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Copy external certs] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:55
Saturday 15 February 2025 07:29:37 -0500 (0:00:00.038) 0:01:43.700 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaserver_external_cert_files_from_controller is defined and ipaserver_external_cert_files_from_controller|length > 0 and not ipaserver_external_cert_files is defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Server installation test] **************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:62
Saturday 15 February 2025 07:29:37 -0500 (0:00:00.040) 0:01:43.741 *****
ok: [managed-node1] => {
"_dirsrv_ca_cert": null,
"_dirsrv_pkcs12_info": null,
"_hostname_overridden": true,
"_http_ca_cert": null,
"_http_pkcs12_info": null,
"_installation_cleanup": true,
"_pkinit_ca_cert": null,
"_pkinit_pkcs12_info": null,
"changed": false,
"domain": "test.local",
"domainlevel": 1,
"external_ca": false,
"external_ca_profile": null,
"external_ca_type": null,
"hostname": "ipaserver.test.local",
"idmax": 1318599999,
"idstart": 1318400000,
"ipa_python_version": 41202,
"no_host_dns": true,
"no_pkinit": false,
"ntp_pool": null,
"ntp_servers": null,
"random_serial_numbers": false,
"realm": "TEST.LOCAL",
"rid_base": 1000,
"secondary_rid_base": 100000000,
"setup_adtrust": false,
"setup_ca": true,
"setup_kra": false,
"sid_generation_always": true
}
TASK [ipaserver : Install - Master password creation] **************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:142
Saturday 15 February 2025 07:29:38 -0500 (0:00:01.460) 0:01:45.202 *****
changed: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": true
}
TASK [ipaserver : Install - Use new master password] ***************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:149
Saturday 15 February 2025 07:29:39 -0500 (0:00:01.237) 0:01:46.439 *****
ok: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaserver : Use user defined master password, if provided] ***************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:155
Saturday 15 February 2025 07:29:39 -0500 (0:00:00.061) 0:01:46.500 *****
skipping: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaserver : Install - Server preparation] ********************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:161
Saturday 15 February 2025 07:29:39 -0500 (0:00:00.025) 0:01:46.526 *****
changed: [managed-node1] => {
"_ca_subject": "CN=Certificate Authority,O=TEST.LOCAL",
"_random_serial_numbers": false,
"_subject_base": "O=TEST.LOCAL",
"adtrust_netbios_name": "TEST",
"adtrust_reset_netbios_name": true,
"ca_subject": "CN=Certificate Authority,O=TEST.LOCAL",
"changed": true,
"dns_ip_addresses": [],
"dns_reverse_zones": [],
"forward_policy": null,
"forwarders": [],
"ip_addresses": [
"10.31.8.30"
],
"no_dnssec_validation": false,
"reverse_zones": [],
"subject_base": "O=TEST.LOCAL"
}
TASK [ipaserver : Install - Setup NTP] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:207
Saturday 15 February 2025 07:29:42 -0500 (0:00:02.170) 0:01:48.697 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Setup DS] ******************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:214
Saturday 15 February 2025 07:29:49 -0500 (0:00:07.617) 0:01:56.314 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Setup KRB] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:243
Saturday 15 February 2025 07:30:22 -0500 (0:00:32.366) 0:02:28.680 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Setup CA] ******************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:270
Saturday 15 February 2025 07:30:29 -0500 (0:00:07.702) 0:02:36.383 *****
changed: [managed-node1] => {
"changed": true,
"csr_generated": false
}
TASK [ipaserver : Copy /root/ipa.csr to "managed-node1-ipa.csr"] ***************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:312
Saturday 15 February 2025 07:34:25 -0500 (0:03:55.391) 0:06:31.774 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "result_ipaserver_setup_ca.csr_generated | bool and ipaserver_copy_csr_to_controller | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Setup otpd] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:323
Saturday 15 February 2025 07:34:25 -0500 (0:00:00.042) 0:06:31.816 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Setup HTTP] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:329
Saturday 15 February 2025 07:34:27 -0500 (0:00:02.729) 0:06:34.545 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Setup KRA] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:361
Saturday 15 February 2025 07:34:58 -0500 (0:00:30.618) 0:07:05.164 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "result_ipaserver_test.setup_kra | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Setup DNS] *****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:372
Saturday 15 February 2025 07:34:58 -0500 (0:00:00.041) 0:07:05.205 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaserver_setup_dns | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Setup ADTRUST] *************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:389
Saturday 15 February 2025 07:34:58 -0500 (0:00:00.039) 0:07:05.245 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Set DS password] ***********************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:405
Saturday 15 February 2025 07:35:06 -0500 (0:00:07.577) 0:07:12.822 *****
changed: [managed-node1] => {
"changed": true
}
TASK [Install - Setup client] **************************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:422
Saturday 15 February 2025 07:35:08 -0500 (0:00:02.433) 0:07:15.256 *****
included: ipaclient for managed-node1
TASK [ipaclient : Import variables specific to distribution] *******************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/main.yml:4
Saturday 15 February 2025 07:35:08 -0500 (0:00:00.061) 0:07:15.317 *****
ok: [managed-node1] => (item=/tmp/freeipa-repo/roles/ipaclient/vars/default.yml) => {
"ansible_facts": {
"ipaclient_packages": [
"ipa-client",
"python3-libselinux"
]
},
"ansible_included_var_files": [
"/tmp/freeipa-repo/roles/ipaclient/vars/default.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "/tmp/freeipa-repo/roles/ipaclient/vars/default.yml"
}
TASK [ipaclient : Install IPA client] ******************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/main.yml:19
Saturday 15 February 2025 07:35:08 -0500 (0:00:00.058) 0:07:15.375 *****
included: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml for managed-node1
TASK [ipaclient : Install - Ensure that IPA client packages are installed] *****
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:4
Saturday 15 February 2025 07:35:08 -0500 (0:00:00.095) 0:07:15.471 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_install_packages | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Set ipaclient_servers] *****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:10
Saturday 15 February 2025 07:35:08 -0500 (0:00:00.047) 0:07:15.519 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "groups.ipaservers is defined and ipaclient_servers is not defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Set ipaclient_servers from cluster inventory] ******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:15
Saturday 15 February 2025 07:35:08 -0500 (0:00:00.042) 0:07:15.561 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_no_dns_lookup | bool and groups.ipaserver is defined and ipaclient_servers is not defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Check that either password or keytab is set] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:21
Saturday 15 February 2025 07:35:09 -0500 (0:00:00.043) 0:07:15.604 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaadmin_keytab is defined and ipaadmin_password is defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Set default principal if no keytab is given] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:26
Saturday 15 February 2025 07:35:09 -0500 (0:00:00.041) 0:07:15.646 *****
ok: [managed-node1] => {
"ansible_facts": {
"ipaadmin_principal": "admin"
},
"changed": false
}
TASK [ipaclient : Install - Fail on missing ipaclient_domain and ipaserver_domain] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:36
Saturday 15 February 2025 07:35:09 -0500 (0:00:00.046) 0:07:15.693 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_configure_dns_resolver | bool and not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Fail on missing ipaclient_servers] *****************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:41
Saturday 15 February 2025 07:35:09 -0500 (0:00:00.042) 0:07:15.735 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_configure_dns_resolver | bool and not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure DNS resolver] ****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:46
Saturday 15 February 2025 07:35:09 -0500 (0:00:00.041) 0:07:15.777 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_configure_dns_resolver | bool and not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - IPA client test] ***********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:52
Saturday 15 February 2025 07:35:09 -0500 (0:00:00.041) 0:07:15.819 *****
ok: [managed-node1] => {
"basedn": "dc=test,dc=local",
"changed": false,
"client_already_configured": false,
"client_domain": "test.local",
"dnsok": false,
"domain": "test.local",
"hostname": "ipaserver.test.local",
"ipa_python_version": 41202,
"kdc": "ipaserver.test.local",
"nosssd_files": {},
"ntp_pool": null,
"ntp_servers": null,
"realm": "TEST.LOCAL",
"selinux_works": true,
"servers": [
"ipaserver.test.local"
],
"sssd": true
}
TASK [ipaclient : Install - Cleanup leftover ccache] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:82
Saturday 15 February 2025 07:35:10 -0500 (0:00:01.201) 0:07:17.020 *****
ok: [managed-node1] => {
"changed": false,
"path": "/etc/ipa/.dns_ccache",
"state": "absent"
}
TASK [ipaclient : Install - Configure NTP] *************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:87
Saturday 15 February 2025 07:35:10 -0500 (0:00:00.436) 0:07:17.456 *****
ok: [managed-node1] => {
"changed": false
}
TASK [ipaclient : Install - Make sure One-Time Password is enabled if it's already defined] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:99
Saturday 15 February 2025 07:35:11 -0500 (0:00:00.921) 0:07:18.377 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_otp is defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Disable One-Time Password for on_master] ***********
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:104
Saturday 15 February 2025 07:35:11 -0500 (0:00:00.042) 0:07:18.420 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_use_otp | bool and ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Test if IPA client has working krb5.keytab] ********
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:109
Saturday 15 February 2025 07:35:11 -0500 (0:00:00.042) 0:07:18.462 *****
ok: [managed-node1] => {
"ca_crt_exists": true,
"changed": false,
"krb5_conf_ok": true,
"krb5_keytab_ok": true,
"ping_test_ok": true
}
TASK [ipaclient : Install - Disable One-Time Password for client with working krb5.keytab] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:119
Saturday 15 February 2025 07:35:13 -0500 (0:00:01.733) 0:07:20.196 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_use_otp | bool and result_ipaclient_test_keytab.krb5_keytab_ok and not ipaclient_force_join | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Keytab or password is required for getting otp] ****
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:137
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.042) 0:07:20.239 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_use_otp | bool and ipaclient_otp is not defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Create temporary file for keytab] ******************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:142
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.043) 0:07:20.282 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_use_otp | bool and ipaclient_otp is not defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Copy keytab to server temporary file] **************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:151
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.044) 0:07:20.326 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_use_otp | bool and ipaclient_otp is not defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Get One-Time Password for client enrollment] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:159
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.045) 0:07:20.372 *****
skipping: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Install - Store the previously obtained OTP] *****************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:169
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.044) 0:07:20.417 *****
skipping: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Install - Remove keytab temporary file] **********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:183
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.042) 0:07:20.459 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_use_otp | bool and ipaclient_otp is not defined",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Store predefined OTP in admin_password] **********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:190
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.044) 0:07:20.503 *****
skipping: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Install - Check if principal and keytab are set] *************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:208
Saturday 15 February 2025 07:35:13 -0500 (0:00:00.042) 0:07:20.546 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Check if one of password or keytabs are set] *******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:213
Saturday 15 February 2025 07:35:14 -0500 (0:00:00.048) 0:07:20.595 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - From host keytab, purge TEST.LOCAL] ****************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:221
Saturday 15 February 2025 07:35:14 -0500 (0:00:00.046) 0:07:20.641 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "(ipaclient_use_otp | bool or ipaclient_force_join | bool) and not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Backup and set hostname] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:238
Saturday 15 February 2025 07:35:14 -0500 (0:00:00.045) 0:07:20.687 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Create temporary krb5 configuration] ***************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:243
Saturday 15 February 2025 07:35:14 -0500 (0:00:00.044) 0:07:20.731 *****
ok: [managed-node1] => {
"changed": false,
"krb_name": "/tmp/tmpwv8_u8yv"
}
TASK [ipaclient : Install - Join IPA] ******************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:252
Saturday 15 February 2025 07:35:15 -0500 (0:00:00.928) 0:07:21.660 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool and (not result_ipaclient_test_keytab.krb5_keytab_ok or ipaclient_force_join)",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : The krb5 configuration is not correct] ***********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:280
Saturday 15 February 2025 07:35:15 -0500 (0:00:00.046) 0:07:21.706 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool and not result_ipaclient_join.changed and not ipaclient_allow_repair | bool and (result_ipaclient_test_keytab.krb5_keytab_ok or (result_ipaclient_join.already_joined is defined and result_ipaclient_join.already_joined))",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : IPA test failed] *********************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:286
Saturday 15 February 2025 07:35:15 -0500 (0:00:00.045) 0:07:21.752 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool and not result_ipaclient_join.changed and not ipaclient_allow_repair | bool and (result_ipaclient_test_keytab.krb5_keytab_ok or (result_ipaclient_join.already_joined is defined and result_ipaclient_join.already_joined))",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Fail due to missing ca.crt file] *****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:290
Saturday 15 February 2025 07:35:15 -0500 (0:00:00.047) 0:07:21.799 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool and not result_ipaclient_join.changed and not ipaclient_allow_repair | bool and (result_ipaclient_test_keytab.krb5_keytab_ok or (result_ipaclient_join.already_joined is defined and result_ipaclient_join.already_joined))",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure IPA default.conf] ************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:304
Saturday 15 February 2025 07:35:15 -0500 (0:00:00.045) 0:07:21.844 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure SSSD] ************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:313
Saturday 15 February 2025 07:35:15 -0500 (0:00:00.047) 0:07:21.892 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaclient : Install - IPA API calls for remaining enrollment parts] ******
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:335
Saturday 15 February 2025 07:35:16 -0500 (0:00:00.930) 0:07:22.822 *****
changed: [managed-node1] => {
"ca_enabled": true,
"changed": true,
"subject_base": "O=TEST.LOCAL"
}
TASK [ipaclient : Install - Fix IPA ca] ****************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:344
Saturday 15 February 2025 07:35:18 -0500 (0:00:02.364) 0:07:25.187 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool and result_ipaclient_test_keytab.krb5_keytab_ok and not result_ipaclient_test_keytab.ca_crt_exists",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Create IPA NSS database] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:355
Saturday 15 February 2025 07:35:18 -0500 (0:00:00.047) 0:07:25.234 *****
changed: [managed-node1] => {
"ca_enabled_ra": true,
"changed": true
}
TASK [ipaclient : Install - Configure SSH and SSHD] ****************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:390
Saturday 15 February 2025 07:35:24 -0500 (0:00:05.867) 0:07:31.102 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaclient : Install - Configure automount] *******************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:398
Saturday 15 February 2025 07:35:25 -0500 (0:00:01.001) 0:07:32.103 *****
ok: [managed-node1] => {
"changed": false
}
TASK [ipaclient : Install - Configure firefox] *********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:404
Saturday 15 February 2025 07:35:26 -0500 (0:00:00.910) 0:07:33.014 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ipaclient_configure_firefox | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure NIS] *************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:410
Saturday 15 February 2025 07:35:26 -0500 (0:00:00.045) 0:07:33.060 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaclient : Remove temporary krb5.conf] **********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:416
Saturday 15 February 2025 07:35:27 -0500 (0:00:01.251) 0:07:34.311 *****
changed: [managed-node1] => {
"changed": true,
"path": "/tmp/tmpwv8_u8yv",
"state": "absent"
}
TASK [ipaclient : Install - Configure krb5 for IPA realm] **********************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:422
Saturday 15 February 2025 07:35:28 -0500 (0:00:00.453) 0:07:34.765 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Configure certmonger] ******************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:436
Saturday 15 February 2025 07:35:28 -0500 (0:00:00.046) 0:07:34.811 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not ipaclient_on_master | bool",
"skip_reason": "Conditional result was False"
}
TASK [ipaclient : Install - Restore original admin password if overwritten by OTP] ***
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:446
Saturday 15 February 2025 07:35:28 -0500 (0:00:00.046) 0:07:34.858 *****
skipping: [managed-node1] => {
"censored": "the output has been hidden due to the fact that 'no_log: true' was specified for this result",
"changed": false
}
TASK [ipaclient : Cleanup leftover ccache] *************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:452
Saturday 15 February 2025 07:35:28 -0500 (0:00:00.043) 0:07:34.901 *****
ok: [managed-node1] => {
"changed": false,
"path": "/etc/ipa/.dns_ccache",
"state": "absent"
}
TASK [ipaclient : Remove temporary krb5.conf] **********************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:457
Saturday 15 February 2025 07:35:28 -0500 (0:00:00.439) 0:07:35.340 *****
ok: [managed-node1] => {
"changed": false,
"path": "/tmp/tmpwv8_u8yv",
"state": "absent"
}
TASK [ipaclient : Remove temporary krb5.conf backup] ***************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:463
Saturday 15 February 2025 07:35:29 -0500 (0:00:00.452) 0:07:35.793 *****
changed: [managed-node1] => {
"changed": true,
"path": "/tmp/tmpwv8_u8yv.ipabkp",
"state": "absent"
}
TASK [ipaclient : Uninstall IPA client] ****************************************
task path: /tmp/freeipa-repo/roles/ipaclient/tasks/main.yml:23
Saturday 15 February 2025 07:35:29 -0500 (0:00:00.443) 0:07:36.236 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "state|default('present') == 'absent'",
"skip_reason": "Conditional result was False"
}
TASK [ipaserver : Install - Enable IPA] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:437
Saturday 15 February 2025 07:35:29 -0500 (0:00:00.047) 0:07:36.284 *****
changed: [managed-node1] => {
"changed": true
}
TASK [ipaserver : Install - Configure firewalld] *******************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:444
Saturday 15 February 2025 07:35:34 -0500 (0:00:04.943) 0:07:41.227 *****
changed: [managed-node1] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--permanent",
"--zone=",
"--add-service=freeipa-ldap",
"--add-service=freeipa-ldaps",
"--add-service=ntp"
],
"delta": "0:00:00.229280",
"end": "2025-02-15 07:35:35.346933",
"rc": 0,
"start": "2025-02-15 07:35:35.117653"
}
STDOUT:
success
TASK [ipaserver : Install - Configure firewalld runtime] ***********************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:458
Saturday 15 February 2025 07:35:35 -0500 (0:00:00.763) 0:07:41.990 *****
changed: [managed-node1] => {
"changed": true,
"cmd": [
"firewall-cmd",
"--zone=",
"--add-service=freeipa-ldap",
"--add-service=freeipa-ldaps",
"--add-service=ntp"
],
"delta": "0:00:00.209430",
"end": "2025-02-15 07:35:35.996698",
"rc": 0,
"start": "2025-02-15 07:35:35.787268"
}
STDOUT:
success
TASK [ipaserver : Install - Cleanup root IPA cache] ****************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:472
Saturday 15 February 2025 07:35:36 -0500 (0:00:00.649) 0:07:42.640 *****
ok: [managed-node1] => {
"changed": false,
"path": "/root/.ipa_cache",
"state": "absent"
}
TASK [ipaserver : Cleanup temporary files] *************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:477
Saturday 15 February 2025 07:35:36 -0500 (0:00:00.418) 0:07:43.059 *****
ok: [managed-node1] => (item=/etc/ipa/.tmp_pkcs12_dirsrv) => {
"ansible_loop_var": "item",
"changed": false,
"item": "/etc/ipa/.tmp_pkcs12_dirsrv",
"path": "/etc/ipa/.tmp_pkcs12_dirsrv",
"state": "absent"
}
ok: [managed-node1] => (item=/etc/ipa/.tmp_pkcs12_http) => {
"ansible_loop_var": "item",
"changed": false,
"item": "/etc/ipa/.tmp_pkcs12_http",
"path": "/etc/ipa/.tmp_pkcs12_http",
"state": "absent"
}
ok: [managed-node1] => (item=/etc/ipa/.tmp_pkcs12_pkinit) => {
"ansible_loop_var": "item",
"changed": false,
"item": "/etc/ipa/.tmp_pkcs12_pkinit",
"path": "/etc/ipa/.tmp_pkcs12_pkinit",
"state": "absent"
}
TASK [ipaserver : Uninstall IPA server] ****************************************
task path: /tmp/freeipa-repo/roles/ipaserver/tasks/main.yml:23
Saturday 15 February 2025 07:35:37 -0500 (0:00:01.229) 0:07:44.289 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "state|default('present') == 'absent'",
"skip_reason": "Conditional result was False"
}
TASK [Issue IPA signed certificates] *******************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:25
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.039) 0:07:44.329 *****
included: fedora.linux_system_roles.certificate for managed-node1
TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.044) 0:07:44.373 *****
included: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for managed-node1
TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.022) 0:07:44.396 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "__certificate_required_facts | difference(ansible_facts.keys() | list) | length > 0",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Check if system is ostree] *******
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:10
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.038) 0:07:44.435 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Set flag to indicate system is ostree] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:15
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.020) 0:07:44.456 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:19
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.023) 0:07:44.479 *****
skipping: [managed-node1] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
ok: [managed-node1] => (item=Fedora.yml) => {
"ansible_facts": {
"__certificate_certmonger_packages": [
"certmonger",
"python3-packaging"
]
},
"ansible_included_var_files": [
"/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/vars/Fedora.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora.yml"
}
skipping: [managed-node1] => (item=Fedora_40.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora_40.yml",
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=Fedora_40.yml) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "__vars_file is file",
"item": "Fedora_40.yml",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Saturday 15 February 2025 07:35:37 -0500 (0:00:00.040) 0:07:44.520 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-dbus python3-pyasn1
TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:23
Saturday 15 February 2025 07:35:39 -0500 (0:00:01.596) 0:07:46.116 *****
changed: [managed-node1] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"rc": 0,
"results": [
"Installed: python3-packaging-23.2-4.fc40.noarch"
]
}
lsrpackages: certmonger python3-packaging
TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:35
Saturday 15 February 2025 07:35:41 -0500 (0:00:02.254) 0:07:48.370 *****
changed: [managed-node1] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:61
Saturday 15 February 2025 07:35:42 -0500 (0:00:00.471) 0:07:48.842 *****
changed: [managed-node1] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:90
Saturday 15 February 2025 07:35:42 -0500 (0:00:00.464) 0:07:49.306 *****
ok: [managed-node1] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"AccessSELinuxContext": "system_u:object_r:certmonger_unit_file_t:s0",
"ActiveEnterTimestamp": "Sat 2025-02-15 07:33:22 EST",
"ActiveEnterTimestampMonotonic": "646543399",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "systemd-journald.socket system.slice network.target sysinit.target dbus-broker.service dbus.socket basic.target syslog.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2025-02-15 07:33:22 EST",
"AssertTimestampMonotonic": "646508469",
"Before": "multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "49645823000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2025-02-15 07:33:22 EST",
"ConditionTimestampMonotonic": "646508466",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlGroupId": "6413",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"CoredumpReceive": "no",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"DefaultStartupMemoryLow": "0",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"DropInPaths": "/usr/lib/systemd/system/service.d/10-timeout-abort.conf",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "12408",
"ExecMainStartTimestamp": "Sat 2025-02-15 07:33:22 EST",
"ExecMainStartTimestampMonotonic": "646520449",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FileDescriptorStorePreserve": "restart",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "[not set]",
"IOReadOperations": "[not set]",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "[not set]",
"IOWriteOperations": "[not set]",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2025-02-15 07:33:22 EST",
"InactiveExitTimestampMonotonic": "646520643",
"InvocationID": "24c9608b240c47da96a01084ef964283",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "14701",
"LimitNPROCSoft": "14701",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "14701",
"LimitSIGPENDINGSoft": "14701",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "12408",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "2507227136",
"MemoryCurrent": "2514944",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryKSM": "no",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemoryPeak": "1144008704",
"MemoryPressureThresholdUSec": "200ms",
"MemoryPressureWatch": "auto",
"MemorySwapCurrent": "0",
"MemorySwapMax": "infinity",
"MemorySwapPeak": "0",
"MemoryZSwapCurrent": "0",
"MemoryZSwapMax": "infinity",
"MountAPIVFS": "no",
"MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"PIDFile": "/run/certmonger.pid",
"PartOf": "dbus-broker.service",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"ReloadSignal": "1",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "dbus.socket sysinit.target system.slice",
"Restart": "no",
"RestartKillSignal": "15",
"RestartMaxDelayUSec": "infinity",
"RestartMode": "normal",
"RestartSteps": "0",
"RestartUSec": "100ms",
"RestartUSecNext": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RootEphemeral": "no",
"RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"SetLoginEnvironment": "no",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StartupMemoryHigh": "infinity",
"StartupMemoryLow": "0",
"StartupMemoryMax": "infinity",
"StartupMemorySwapMax": "infinity",
"StartupMemoryZSwapMax": "infinity",
"StateChangeTimestamp": "Sat 2025-02-15 07:35:32 EST",
"StateChangeTimestampMonotonic": "776572483",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SurviveFinalKillSignal": "no",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "1",
"TasksMax": "4410",
"TimeoutAbortUSec": "45s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "45s",
"TimeoutStopFailureMode": "abort",
"TimeoutStopUSec": "45s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:101
Saturday 15 February 2025 07:35:43 -0500 (0:00:00.633) 0:07:49.940 *****
changed: [managed-node1] => (item={'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "ipa",
"dns": "ipaserver.test.local",
"name": "mycert_basic_ipa",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
}
MSG:
Certificate requested (new).
changed: [managed-node1] => (item={'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "ipa",
"dns": "ipaserver.test.local",
"group": "ftp",
"name": "groupcert",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
}
MSG:
Certificate requested (new). File attributes updated.
TASK [fedora.linux_system_roles.certificate : Slurp the contents of the files] ***
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:152
Saturday 15 February 2025 07:35:46 -0500 (0:00:03.323) 0:07:53.263 *****
skipping: [managed-node1] => (item=['cert', {'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"cert",
{
"ca": "ipa",
"dns": "ipaserver.test.local",
"name": "mycert_basic_ipa",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['cert', {'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"cert",
{
"ca": "ipa",
"dns": "ipaserver.test.local",
"group": "ftp",
"name": "groupcert",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['key', {'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"key",
{
"ca": "ipa",
"dns": "ipaserver.test.local",
"name": "mycert_basic_ipa",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['key', {'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"key",
{
"ca": "ipa",
"dns": "ipaserver.test.local",
"group": "ftp",
"name": "groupcert",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['ca', {'name': 'mycert_basic_ipa', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"ca",
{
"ca": "ipa",
"dns": "ipaserver.test.local",
"name": "mycert_basic_ipa",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => (item=['ca', {'name': 'groupcert', 'dns': 'ipaserver.test.local', 'principal': 'HTTP/ipaserver.test.local@TEST.LOCAL', 'ca': 'ipa', 'group': 'ftp'}]) => {
"ansible_loop_var": "item",
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"item": [
"ca",
{
"ca": "ipa",
"dns": "ipaserver.test.local",
"group": "ftp",
"name": "groupcert",
"principal": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [managed-node1] => {
"changed": false
}
MSG:
All items skipped
TASK [fedora.linux_system_roles.certificate : Create return data] **************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:160
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.056) 0:07:53.320 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Stop tracking certificates] ******
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:176
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.034) 0:07:53.355 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Remove files] ********************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:181
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.037) 0:07:53.392 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "certificate_test_mode | d(false)",
"skip_reason": "Conditional result was False"
}
TASK [Verify certificates] *****************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:41
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.042) 0:07:53.435 *****
included: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node1 => (item={'path': '/etc/pki/tls/certs/mycert_basic_ipa.crt', 'key_path': '/etc/pki/tls/private/mycert_basic_ipa.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']})
included: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml for managed-node1 => (item={'path': '/etc/pki/tls/certs/groupcert.crt', 'key_path': '/etc/pki/tls/private/groupcert.key', 'owner': 'root', 'group': 'ftp', 'mode': '0640', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'ipaserver.test.local'}, {'name': 'organizationName', 'oid': '2.5.4.10', 'value': 'TEST.LOCAL'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'ipaserver.test.local'}, {'name': 'Universal Principal Name (UPN)', 'oid': '1.3.6.1.4.1.311.20.2.3', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}, {'name': 'Kerberos principalname', 'oid': '1.3.6.1.5.2.2', 'value': 'HTTP/ipaserver.test.local@TEST.LOCAL'}], 'key_usage': ['digital_signature', 'content_commitment', 'key_encipherment', 'data_encipherment']})
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:2
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.066) 0:07:53.502 *****
ok: [managed-node1] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:9
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.017) 0:07:53.519 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:14
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.019) 0:07:53.539 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:18
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.019) 0:07:53.558 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ansible_distribution_major_version == \"7\"",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Saturday 15 February 2025 07:35:46 -0500 (0:00:00.014) 0:07:53.573 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-pyasn1
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:38
Saturday 15 February 2025 07:35:48 -0500 (0:00:01.593) 0:07:55.166 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"atime": 1739622945.067537,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "4408c8334ab4865d72eb63d71ec7f056fe3ada99",
"ctime": 1739622945.063537,
"dev": 51714,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 1927,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1739622945.063537,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_basic_ipa.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1854,
"uid": 0,
"version": "3506518959",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:43
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.443) 0:07:55.610 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:49
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.020) 0:07:55.630 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:59
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.041) 0:07:55.672 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:65
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.039) 0:07:55.712 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"atime": 1739622944.1525311,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "68bea644c96b3b5d3826a15e1b7f2545edf08dce",
"ctime": 1739622945.063537,
"dev": 51714,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 1926,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1739622945.063537,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_basic_ipa.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "3674434761",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:70
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.425) 0:07:56.138 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:76
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.019) 0:07:56.157 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:86
Saturday 15 February 2025 07:35:49 -0500 (0:00:00.043) 0:07:56.201 *****
ok: [managed-node1] => {
"certificate": {
"extensions": {
"authorityInfoAccess": {
"critical": false,
"value": [
{
"location": "http://ipa-ca.test.local/ca/ocsp",
"method": "OCSP"
}
]
},
"authorityKeyIdentifier": {
"critical": false,
"value": "EC:FC:FD:01:45:58:D7:2D:8C:79:60:21:52:6E:B5:12:A1:14:C9:9E"
},
"cRLDistributionPoints": {
"critical": false,
"value": [
{
"crl_issuer": [
{
"commonName": "Certificate Authority",
"organizationName": "ipaca"
}
],
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
]
}
]
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": true,
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"oid": "1.3.6.1.4.1.311.20.2.3",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
},
{
"name": "Kerberos principalname",
"oid": "1.3.6.1.5.2.2",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "48:9F:C7:36:C0:FA:0E:3A:B2:AE:99:CE:AD:D4:53:4C:9B:99:BB:EC"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"validity": {
"not_valid_after": "20270216123544Z",
"not_valid_before": "20250215123544Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:92
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.556) 0:07:56.757 *****
ok: [managed-node1] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityInfoAccess": {
"critical": false,
"value": [
{
"location": "http://ipa-ca.test.local/ca/ocsp",
"method": "OCSP"
}
]
},
"authorityKeyIdentifier": {
"critical": false,
"value": "EC:FC:FD:01:45:58:D7:2D:8C:79:60:21:52:6E:B5:12:A1:14:C9:9E"
},
"cRLDistributionPoints": {
"critical": false,
"value": [
{
"crl_issuer": [
{
"commonName": "Certificate Authority",
"organizationName": "ipaca"
}
],
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
]
}
]
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": true,
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"oid": "1.3.6.1.4.1.311.20.2.3",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
},
{
"name": "Kerberos principalname",
"oid": "1.3.6.1.5.2.2",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "48:9F:C7:36:C0:FA:0E:3A:B2:AE:99:CE:AD:D4:53:4C:9B:99:BB:EC"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"validity": {
"not_valid_after": "20270216123544Z",
"not_valid_before": "20250215123544Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:96
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.021) 0:07:56.778 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:104
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.043) 0:07:56.822 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:112
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.022) 0:07:56.844 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:119
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.038) 0:07:56.883 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:130
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.043) 0:07:56.927 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:143
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.043) 0:07:56.971 *****
ok: [managed-node1] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_basic_ipa.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.054191",
"end": "2025-02-15 07:35:50.796043",
"rc": 0,
"start": "2025-02-15 07:35:50.741852"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:152
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.467) 0:07:57.439 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:2
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.040) 0:07:57.480 *****
ok: [managed-node1] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:9
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.017) 0:07:57.497 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:14
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.019) 0:07:57.517 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "not __certificate_is_ostree is defined",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:18
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.019) 0:07:57.537 *****
skipping: [managed-node1] => {
"changed": false,
"false_condition": "ansible_distribution_major_version == \"7\"",
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:28
Saturday 15 February 2025 07:35:50 -0500 (0:00:00.014) 0:07:57.551 *****
ok: [managed-node1] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
lsrpackages: python3-cryptography python3-pyasn1
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:38
Saturday 15 February 2025 07:35:52 -0500 (0:00:01.586) 0:07:59.138 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"atime": 1739622946.5315464,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "cbe8736b025d0e37a2cb3ebc8268757450b8c2d2",
"ctime": 1739622946.6055467,
"dev": 51714,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 1931,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1739622946.5275462,
"nlink": 1,
"path": "/etc/pki/tls/certs/groupcert.crt",
"pw_name": "root",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1854,
"uid": 0,
"version": "431968957",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:43
Saturday 15 February 2025 07:35:52 -0500 (0:00:00.419) 0:07:59.557 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:49
Saturday 15 February 2025 07:35:52 -0500 (0:00:00.019) 0:07:59.577 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:59
Saturday 15 February 2025 07:35:53 -0500 (0:00:00.041) 0:07:59.619 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:65
Saturday 15 February 2025 07:35:53 -0500 (0:00:00.038) 0:07:59.658 *****
ok: [managed-node1] => {
"changed": false,
"stat": {
"atime": 1739622945.845542,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "a3db5974e89fc4f577dd0a81a7593b9e175fe02e",
"ctime": 1739622946.6075468,
"dev": 51714,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 1930,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1739622946.5275462,
"nlink": 1,
"path": "/etc/pki/tls/private/groupcert.key",
"pw_name": "root",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "3421656746",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:70
Saturday 15 February 2025 07:35:53 -0500 (0:00:00.418) 0:08:00.076 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:76
Saturday 15 February 2025 07:35:53 -0500 (0:00:00.020) 0:08:00.096 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:86
Saturday 15 February 2025 07:35:53 -0500 (0:00:00.068) 0:08:00.165 *****
ok: [managed-node1] => {
"certificate": {
"extensions": {
"authorityInfoAccess": {
"critical": false,
"value": [
{
"location": "http://ipa-ca.test.local/ca/ocsp",
"method": "OCSP"
}
]
},
"authorityKeyIdentifier": {
"critical": false,
"value": "EC:FC:FD:01:45:58:D7:2D:8C:79:60:21:52:6E:B5:12:A1:14:C9:9E"
},
"cRLDistributionPoints": {
"critical": false,
"value": [
{
"crl_issuer": [
{
"commonName": "Certificate Authority",
"organizationName": "ipaca"
}
],
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
]
}
]
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": true,
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"oid": "1.3.6.1.4.1.311.20.2.3",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
},
{
"name": "Kerberos principalname",
"oid": "1.3.6.1.5.2.2",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "32:DC:1E:FB:82:33:14:9B:0F:43:97:3F:BB:49:4A:C8:B9:1D:E7:91"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"validity": {
"not_valid_after": "20270216123546Z",
"not_valid_before": "20250215123546Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:92
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.468) 0:08:00.633 *****
ok: [managed-node1] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityInfoAccess": {
"critical": false,
"value": [
{
"location": "http://ipa-ca.test.local/ca/ocsp",
"method": "OCSP"
}
]
},
"authorityKeyIdentifier": {
"critical": false,
"value": "EC:FC:FD:01:45:58:D7:2D:8C:79:60:21:52:6E:B5:12:A1:14:C9:9E"
},
"cRLDistributionPoints": {
"critical": false,
"value": [
{
"crl_issuer": [
{
"commonName": "Certificate Authority",
"organizationName": "ipaca"
}
],
"full_name": [
"http://ipa-ca.test.local/ipa/crl/MasterCRL.bin"
]
}
]
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": true,
"value": [
"digital_signature",
"content_commitment",
"key_encipherment",
"data_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "ipaserver.test.local"
},
{
"name": "Universal Principal Name (UPN)",
"oid": "1.3.6.1.4.1.311.20.2.3",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
},
{
"name": "Kerberos principalname",
"oid": "1.3.6.1.5.2.2",
"value": "HTTP/ipaserver.test.local@TEST.LOCAL"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "32:DC:1E:FB:82:33:14:9B:0F:43:97:3F:BB:49:4A:C8:B9:1D:E7:91"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "organizationName",
"oid": "2.5.4.10",
"value": "TEST.LOCAL"
},
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "ipaserver.test.local"
}
],
"validity": {
"not_valid_after": "20270216123546Z",
"not_valid_before": "20250215123546Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:96
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.021) 0:08:00.655 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:104
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.069) 0:08:00.724 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:112
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.021) 0:08:00.745 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:119
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.086) 0:08:00.832 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:130
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.045) 0:08:00.877 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:143
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.044) 0:08:00.922 *****
ok: [managed-node1] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/groupcert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.054217",
"end": "2025-02-15 07:35:54.741260",
"rc": 0,
"start": "2025-02-15 07:35:54.687043"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/assert_certificate_parameters.yml:152
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.462) 0:08:01.384 *****
ok: [managed-node1] => {
"changed": false
}
MSG:
All assertions passed
PLAY RECAP *********************************************************************
managed-node1 : ok=104 changed=31 unreachable=0 failed=0 skipped=56 rescued=0 ignored=0
TASKS RECAP ********************************************************************
Saturday 15 February 2025 07:35:54 -0500 (0:00:00.039) 0:08:01.423 *****
===============================================================================
ipaserver : Install - Setup CA ---------------------------------------- 235.39s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:270 -----------------------
ipaserver : Install - Ensure that IPA server packages are installed ---- 76.68s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:7 -------------------------
ipaserver : Install - Setup DS ----------------------------------------- 32.37s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:214 -----------------------
ipaserver : Install - Setup HTTP --------------------------------------- 30.62s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:329 -----------------------
Ensure hostname package is installed ----------------------------------- 13.14s
/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tasks/setup_ipa.yml:53
ipaserver : Install - Setup KRB ----------------------------------------- 7.70s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:243 -----------------------
ipaserver : Install - Setup NTP ----------------------------------------- 7.62s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:207 -----------------------
ipaserver : Install - Setup ADTRUST ------------------------------------- 7.58s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:389 -----------------------
ipaclient : Install - Create IPA NSS database --------------------------- 5.87s
/tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:355 -----------------------
ipaserver : Install - Enable IPA ---------------------------------------- 4.94s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:437 -----------------------
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 3.32s
/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:101
ipaserver : Install - Setup otpd ---------------------------------------- 2.73s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:323 -----------------------
Gathering Facts --------------------------------------------------------- 2.72s
/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/tests/certificate/tests_basic_ipa.yml:2
ipaserver : Install - Set DS password ----------------------------------- 2.43s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:405 -----------------------
ipaclient : Install - IPA API calls for remaining enrollment parts ------ 2.36s
/tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:335 -----------------------
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 2.25s
/tmp/collections-ZIH/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:23
ipaserver : Install - Server preparation -------------------------------- 2.17s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:161 -----------------------
ipaserver : Install - Ensure that firewall packages installed ----------- 2.07s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:24 ------------------------
ipaclient : Install - Test if IPA client has working krb5.keytab -------- 1.73s
/tmp/freeipa-repo/roles/ipaclient/tasks/install.yml:109 -----------------------
ipaserver : Firewalld service - Ensure that firewalld is running -------- 1.73s
/tmp/freeipa-repo/roles/ipaserver/tasks/install.yml:34 ------------------------