Thomas Woerner

Do you have environment variables `KRB5CCNAME` or `KRB5_CLIENT_KTNAME` set? Your ccache is referencing a KEYRING.

These variables are used by the modules. Where have you set these variables? For the service user locally or in the ansible environment? Please verify that the settings of the...

Do you have a difference in the automount configuration files?

The use of the module with repair mode seems to either corrupt something like changing a configuration file in a bad way or stop or deactivate the service. It would...

Have you removed the `delegate_to` line? The password is used by the action plugin `action_plugins/ipaclient_get_otp.py` which is using the module `library/ipaclient_get_otp`.

Please add your inventory file and if you are using your own playbook for client deployment also the playbook.

What are you using for `vault_ipaadmin_principal`? Please add the output of the ansible-playbook output (at best wth -vv).

No, there are two Ansible parts that are involved here. There is the action plugin https://github.com/freeipa/ansible-freeipa/blob/master/roles/ipaclient/action_plugins/ipaclient_get_otp.py . Only this action module is supporting the `password` parameter. This action module is...

There is a new ansible-freeipa 0.4.2 release that is fixing this issue finally. The issue was that the collection was using the wrong path for the action plugin. Therefore it...

The vars file for Ansible Linux 2 should not be named `RedHat-2,yml`. Please create a link for `Ansible-2.yml` pointing to `RedHat-7.yml` instead. Why have you set `ansible_python_interpreter`? Is that really...