---

- name: Test ipahost random password generation

  hosts: ipaserver

  become: true

  tasks:

  - name: Get Domain from server name

    set_fact:

      ipaserver_domain: "{{ ansible_fqdn.split('.')[1:] | join ('.') }}"

    when: ipaserver_domain is not defined

  - name: Set host1_fqdn and host2_fqdn

    set_fact:

      host1_fqdn: "{{ 'host1.' + ipaserver_domain }}"

      host2_fqdn: "{{ 'host2.' + ipaserver_domain }}"

  - name: Test hosts absent

    ipahost:

      ipaadmin_password: SomeADMINpassword

      name:

      - "{{ host1_fqdn }}"

      - "{{ host2_fqdn }}"

      update_dns: yes

      state: absent

  - name: Host "{{ host1_fqdn }}" present with random password

    ipahost:

      ipaadmin_password: SomeADMINpassword

      name: "{{ host1_fqdn }}"

      random: yes

      force: yes

      update_password: on_create

    register: ipahost

    failed_when: not ipahost.changed

  - assert:

      that:

      - ipahost.host.randompassword is defined

  - name: Print generated random password

    debug:

      var: ipahost.host.randompassword

  - name: Host "{{ host1_fqdn }}" absent

    ipahost:

      ipaadmin_password: SomeADMINpassword

      name:

      - "{{ host1_fqdn }}"

      state: absent

  - name: Hosts "{{ host1_fqdn }}" and "{{ host2_fqdn }}" present with random password

    ipahost:

      ipaadmin_password: SomeADMINpassword

      hosts:

      - name: "{{ host1_fqdn }}"

        random: yes

        force: yes

      - name: "{{ host2_fqdn }}"

        random: yes

        force: yes

      update_password: on_create

    register: ipahost

    failed_when: not ipahost.changed

  - assert:

      that:

      - ipahost.host["{{host1_fqdn }}"].randompassword is

        defined

      - ipahost.host["{{host2_fqdn }}"].randompassword is

        defined

  - name: Print generated random password for "{{host1_fqdn }}"

    debug:

      var: ipahost.host["{{host1_fqdn }}"].randompassword

  - name: Print generated random password for "{{host2_fqdn }}"

    debug:

      var: ipahost.host["{{host2_fqdn }}"].randompassword

  - name: Enrolled host "{{ ansible_fqdn }}" fails to set random password with update_password always

    ipahost:

      ipaadmin_password: SomeADMINpassword

      hosts:

      - name: "{{ ansible_fqdn }}"

        random: yes

      update_password: always

    register: ipahost

    failed_when: ipahost.changed

  - assert:

      that:

      - ipahost.host["{{ ansible_fqdn }}"].randompassword is

        not defined

      - "'Password cannot be set on enrolled host' in ipahost.msg"

  - name: Hosts "{{ host1_fqdn }}" and "{{ host2_fqdn }}" absent

    ipahost:

      ipaadmin_password: SomeADMINpassword

      name:

      - "{{ host1_fqdn }}"

      - "{{ host2_fqdn }}"

      state: absent