IPA Client enrollment is failing when using the freeipa.ansible_freeipa collection

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux 9.5
  • IPA Client
  • ansible

Issue

  • IPA Client installation is failing with freeipa.ansible_freeipa collection as below:
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AttributeError: 'installer_obj' object has no attribute 'dns_over_tls'

fatal: [redacted]: FAILED! => {"changed": false, "module_stderr": "Traceback (most recent call last):\n  File \"<stdin>\", line 107, in <module>\n  File \"<stdin>\", line 99, in _ansiballz_main\n  File \"<stdin>\", line 47, in invoke_module\n  File \"/usr/lib64/python3.9/runpy.py\", line 225, in run_module\n    return _run_module_code(code, init_globals, run_name, mod_spec)\n  File \"/usr/lib64/python3.9/runpy.py\", line 97, in _run_module_code\n    _run_code(code, mod_globals, init_globals,\n  File \"/usr/lib64/python3.9/runpy.py\", line 87, in _run_code\n    exec(code, run_globals)\n  File \"/tmp/ansible_freeipa.ansible_freeipa.ipaclient_setup_sssd_payload_effgr_os/ansible_freeipa.ansible_freeipa.ipaclient_setup_sssd_payload.zip/ansible_collections/freeipa/ansible_freeipa/plugins/modules/ipaclient_setup_sssd.py\", line 190, in <module>\n  File \"/tmp/ansible_freeipa.ansible_freeipa.ipaclient_setup_sssd_payload_effgr_os/ansible_freeipa.ansible_freeipa.ipaclient_setup_sssd_payload.zip/ansible_collections/freeipa/ansible_freeipa/plugins/modules/ipaclient_setup_sssd.py\", line 181, in main\n  File \"/usr/lib/python3.9/site-packages/ipaclient/install/client.py\", line 1005, in configure_sssd_conf\n    if options.dns_over_tls:\nAttributeError: 'installer_obj' object has no attribute 'dns_over_tls'\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1

Resolution

  • This is a known issue and is being tracked in Red Hat Private Jira and Upstream link.

Root Cause

  • meta/main.yml
collections:
  - name: freeipa.ansible_freeipa
    version: 1.14.4
  • playbook.yaml
 - name: Include ipaclient role for client configuration
      ansible.builtin.include_role:
        name: freeipa.ansible_freeipa.ipaclient

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments