Thomas Woerner

Using the module depends on either having valid credentials or providing `ipaadmin_password` for the module task.

Have you tested if host names need to be FQDN with older and newer IPA versions?

It might be good to add prameters to `podman create`: `--dns=127.0.0.1 --dns-search=test.local --no-hosts` Otherwise `resolv.conf` and `hosts` is copied form the host.

Running `utils/run-tests.sh user` results in `138 skipped, 8 deselected in 1.08s`. It would be good to be able to detect if at least a single test would be run...

All these modules need to support the `delete_continue` parameter: automountlocation dnsforwardzone dnszone group hbacrule hbacsvc hbacsvcgroup host hostgroup location permission privilege pwpolicy role sudocmd sudocmdgroup sudorule topologysegment topologysuffix trust user...

For the generation of the galaxy collection please use `utils/build-galaxy-release.sh`. This script is generating the collection. The script creates a temporary copy of all the needed files from the repo...

I created an issue for ansible to enable the use of a script to generate the collection from git repo: https://github.com/ansible/ansible/issues/77553

How did you install the replica? Which parameters have been set? Which system and ansible-freeipa version are you using?

The code for system-resolved needs to be kept in the ipaclient role even with a change in FreeIPA to deactivate systemd-resolved on servers and replicas.

@rezaa1 Please explain what "The playbook works with some users, and not working for other users!" means. Which users are these? The use of kinit is needed for the command...