31.7. 使用 Ansible 确保 DNS 全局转发器在 IdM 中被禁用

流程

1. 导航到 /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/dnsconfig 目录：

   $ cd /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/dnsconfig

   Copy to Clipboard Toggle word wrap

2. 验证 disable-global-forwarders.yml Ansible playbook 文件的内容，它已配置为禁用所有 DNS 全局转发器。例如：

   $ cat disable-global-forwarders.yml
   ---
   - name: Playbook to disable global DNS forwarders
     hosts: ipaserver
   
     vars_files:
     - /home/user_name/MyPlaybooks/secret.yml
     tasks:
     - name: Disable global forwarders.
       freeipa.ansible_freeipa.ipadnsconfig:
         forward_policy: none

   Copy to Clipboard Toggle word wrap

3. 运行 playbook：

   $ ansible-playbook --vault-password-file=password_file -v -i inventory.file disable-global-forwarders.yml

   Copy to Clipboard Toggle word wrap