diff options
| author | Patrick Uiterwijk <puiterwijk@redhat.com> | 2016-10-28 11:58:16 +0000 |
|---|---|---|
| committer | Patrick Uiterwijk <puiterwijk@redhat.com> | 2016-10-28 11:58:16 +0000 |
| commit | 485965aaa8dd60c5a7bc3b042bf7c01a8ba3e753 (patch) | |
| tree | 417f4f0762460918a0b3b43c35ce8006fc9ff28b /roles/keytab | |
| parent | f408d9d3a274a83576d99a5743285ef589f34faf (diff) | |
| download | ansible-485965aaa8dd60c5a7bc3b042bf7c01a8ba3e753.tar.gz ansible-485965aaa8dd60c5a7bc3b042bf7c01a8ba3e753.tar.xz ansible-485965aaa8dd60c5a7bc3b042bf7c01a8ba3e753.zip | |
Handle the case when no key was created yet
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Diffstat (limited to 'roles/keytab')
| -rw-r--r-- | roles/keytab/service/tasks/main.yml | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/roles/keytab/service/tasks/main.yml b/roles/keytab/service/tasks/main.yml index 2433e6e5c..a975be53e 100644 --- a/roles/keytab/service/tasks/main.yml +++ b/roles/keytab/service/tasks/main.yml @@ -79,12 +79,31 @@ - name: Retrieve keytab command: ipa-getkeytab --retrieve --server {{ipa_server}} --keytab {{kt_location}} --principal {{service}}/{{host}} + register: retrieve_result + failed_when: "not ('Keytab successfully retrieved' in retrieve_result.stdout or 'krbPrincipalKey not found' in retrieve_result.stderr)" tags: - keytab - config - krb5 when: not keytab_status.stat.exists +- name: Create keytab if it did not exist + run_once: true + command: ipa-getkeytab --server {{ipa_server}} --keytab {{kt_location}} --principal {{service}}/{{host}} + tags: + - keytab + - config + - krb5 + when: not keytab_status.stat.exists and 'krbPrincipalKey not found' in retrieve_results.stderr + +- name: Retrieve keytab if it did not exist + command: ipa-getkeytab --retrieve --server {{ipa_server}} --keytab {{kt_location}} --principal {{service}}/{{host}} + tags: + - keytab + - config + - krb5 + when: not keytab_status.stat.exists and 'krbPrincipalKey not found' in retrieve_results.stderr + - name: Destroy host ticket command: kdestroy -A tags: |