---
- hosts: ipa
  remote_user: centos
  sudo: yes
  name: install-ipa
  tasks:
  - yum: name=* state=latest
  - yum: name=rng-tools,bind-dyndb-ldap,ipa-server state=latest
#  - command: /usr/sbin/rngd -r /dev/hwrng
  - command: ipa-server-install -U -r AYOUNG -p FreeIPA4All -a FreeIPA4All --setup-dns --forwarder 192.168.52.3
---
- hosts: ipa
  remote_user: centos
  sudo: yes
  name: install-ipa
  tasks:
  - yum: name=* state=latest
  - yum: name=rng-tools,bind-dyndb-ldap,ipa-server,epel-release state=latest
#  - command: /usr/sbin/rngd -r /dev/hwrng

  - command: ipa-server-install -U -r AYOUNG -p FreeIPA4All -a FreeIPA4All --setup-dns --forwarder 192.168.52.3
  - get_url: dest=/etc/yum.repos.d/puiterwijk-ipsilon.repo url=https://copr.fedoraproject.org/coprs/puiterwijk/ipsilon/repo/epel-7/puiterwijk-ipsilon-epel-7.repo
  - get_url: dest=/etc/yum.repos.d/sssd.repo url=https://copr.fedoraproject.org/coprs/nkinder/sssd/repo/epel-7/nkinder-sssd-epel-7.repo
  - yum: name=ipsilon,ipsilon-tools-ipa,ipsilon-saml2,ipsilon-authgssapi,ipsilon-authform,ipsilon-infosssd state=latest
  - command: ipsilon-server-install --ipa=yes --gssapi=yes --form=yes --info-sssd=yes --admin-user=admin
  - command: rm -f /etc/httpd/conf.d/ssl.conf
  - replace: regexp=SSLRequireSSL replace=NSSRequireSSL  dest=/etc/httpd/conf.d/ipsilon-idp.conf
  - command: systemctl restart httpd.service
Add Ipsilon install to IPA server
Add Ipsilon install to IPA server
