49.4. Using Ansible to create an ID view with a domain resolution order

Procedure

1. Navigate to your ~/MyPlaybooks/ directory and create an Ansible playbook file add-id-view-with-domain-resolution-order.yml with the following content:

   ---
   - name: Playbook to add idview and apply it to an IdM client
     hosts: ipaserver
     vars_files:
     - /home/<user_name>/MyPlaybooks/secret.yml
     become: false
     gather_facts: false
   
     tasks:
     - name: Add idview and apply it to testhost.idm.example.com
       ipaidview:
         ipaadmin_password: "{{ ipaadmin_password }}"
         name: test_idview
         host: testhost.idm.example.com
         domain_resolution_order: "ad.example.com:ipa.example.com"

2. Run the playbook. Specify the playbook file, the file storing the password protecting the secret.yml file, and the inventory file:

   $ ansible-playbook --vault-password-file=password_file -v -i inventory add-id-view-with-domain-resolution-order.yml

Verification

1. SSH to testhost.idm.example.com.

2. Verify you can retrieve user information for a user from the ad.example.com domain using only a short name.

   [root@testhost ~]# id aduser05
   uid=1916901102(aduser05) gid=1916900513(domain users) groups=1916900513(domain users)