26.6. Using the one-time password method in Ansible to install an IdM client

• One that has the credentials of an IdM administrator.
• Another that has the required Ansible credentials, including root access to the host to become an IdM client.

Prerequisites

• You have the IdM admin credentials or at least the Host Enrollment privilege and a permission to add DNS records in IdM.
• You have configured a user escalation method on the Ansible managed node to allow you to install an IdM client.
• If your Ansible control node is running on RHEL 8.7 or earlier, you must be able to install packages on your Ansible control node.

• You have configured your Ansible control node to meet the following requirements:

  • You are using Ansible version 2.15 or later.
  • You have installed the ansible-freeipa package.
  • The example assumes that in the ~/MyPlaybooks/ directory, you have created an Ansible inventory file with the fully-qualified domain name (FQDN) of the IdM server.
  • The example assumes that the secret.yml Ansible vault stores your ipaadmin_password and that you have access to a file that stores the password protecting the secret.yml file.
• The target node, that is the node on which the freeipa.ansible_freeipa module is executed, is part of the IdM domain as an IdM client, server or replica.
• The managed node is a Red Hat Enterprise Linux 10 system with a static IP address and a working package manager.