Thomas Woerner

Hello, do you have errors in the ipaserver-install.log file? The long time (to fail) smells like a DNS issue or a memory issue. Which ansible-freeipa version are you using? Please...

@orodbhen The current inventory plugin is able to return the IPA servers in the domain even filtered by server role. A full domain dynamic inventory could become really huge with...

There are the parameters `ipaserver_install_packages` and `ipareplica_install_packages` and `ipaclient_install_packages`. These define if packages will be installed on the node and default to true. Setting these to false for the matching...

Now I got it. You want to install the needed packages only and skip the deployment.

PR https://github.com/freeipa/ansible-freeipa/pull/987 is changing the code for OTP. The action plugin is removed and the OTP is generated on the first entry in the server list returned by ipaclient_test.

Yes, the combination of `ipaadmin_keytab` and `ipaclient_get_otp` is not supported by the module. I do not understand why you have issues with `ipaadmin_password` though. Have you been trying to use...

PR https://github.com/freeipa/ansible-freeipa/pull/987 is changing the code for OTP. The action plugin is removed and the OTP is generated on the first entry in the server list returned by ipaclient_test.

For ipaclient role, you can enable `ipaclient_allow_repair`. This will try to repair and apply configuration changes.

It seems you found a bug.

That was the wrong issue :-)