1.7. Using an Ansible playbook to ensure that the forward first policy is set in IdM DNS global configuration

Procedure

1. Navigate to the ~/MyPlaybooks/ directory:

   $ cd ~/MyPlaybooks/

2. Make a copy of the set-configuration.yml Ansible playbook file from the relevant collections directory and rename it. For example:

   $ cp /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/dnsconfig/set-configuration.yml set-forward-policy-to-first.yml

3. Open the set-forward-policy-to-first.yml file for editing.

4. Adapt the file by setting the following variables in the freeipa.ansible_freeipa.ipadnsconfig task section:

   • Indicate that the value of the ipaadmin_password variable is defined in the secret.yml Ansible vault file.

   • Set the forward_policy variable to first.

     Delete all the other lines of the original playbook that are irrelevant. This is the modified Ansible playbook file for the current example:

   ---
   - name: Playbook to set global forwarding policy to first
     hosts: ipaserver
     become: true
   
     tasks:
     - name: Set global forwarding policy to first.
       freeipa.ansible_freeipa.ipadnsconfig:
         ipaadmin_password: "{{ ipaadmin_password }}"
         forward_policy: first

5. Save the file.

   For details about variables and example playbooks in the FreeIPA Ansible collection, see the /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/README-dnsconfig.md file and the /usr/share/ansible/collections/ansible_collections/freeipa/ansible_freeipa/playbooks/dnsconfig directory on the control node.

6. Run the playbook:

   $ ansible-playbook --vault-password-file=password_file -v -i inventory.file set-forward-policy-to-first.yml