Use the new modules

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

roles/ipa/server/tasks/main.yml

@@ -356,6 +356,15 @@
   when: ipa_initial
   register: output
 
+- name: Destroy admin ticket
+  command: kdestroy -A
+  tags:
+  - ipa/server
+  - keytab
+  - config
+  - krb5
+  when: ipa_initial
+
 # Noggin user setup
 
 - name: Register the proper noggin admin password
@@ -382,80 +391,57 @@
   when: ipa_initial
 
 - name: Create the noggin privilege
-  command:
+  ipaprivilege:
-    argv:
+    name: Self-service Portal Administrators
-      - ipa
+    description: Noggin admin users
-      - privilege-add
+    ipaadmin_password: "{{ ipa_admin_password }}"
-      - Self-service Portal Administrators
-      - --desc=Noggin admin users
   tags:
   - ipa/server
   - config
   when: ipa_initial
-  register: output
-  changed_when: "'already exists' not in output.stderr"
-  failed_when: "'already exists' not in output.stderr and output.rc != 0"
 
 - name: Setup the noggin privilege
-  command:
+  ipaprivilege:
-    argv:
+    name: Self-service Portal Administrators
-      - ipa
+    permission:
-      - privilege-add-permission
+    - "System: Modify Users"
-      - Self-service Portal Administrators
+    - "System: Change User password"
-      - "--permissions=System: Modify Users"
+    - "System: Add Stage User"
-      - "--permissions=System: Change User password"
+    - "System: Read Stage Users"
-      - "--permissions=System: Add Stage User"
+    - "System: Modify Stage User"
-      - "--permissions=System: Read Stage Users"
+    - "System: Modify User RDN"
-      - "--permissions=System: Modify Stage User"
+    - "System: Remove Stage User"
-      - "--permissions=System: Modify User RDN"
+    - "System: Add Users"
-      - "--permissions=System: Remove Stage User"
+    - "System: Add User to default group"
-      - "--permissions=System: Add Users"
+    action: member
-      - "--permissions=System: Add User to default group"
+    ipaadmin_password: "{{ ipa_admin_password }}"
   tags:
   - ipa/server
   - config
   when: ipa_initial
-  register: output
-  changed_when: "'Number of permissions added 0' not in output.stdout"
-  failed_when: "'Number of permissions added 0' not in output.stdout and output.rc != 0"
 
 - name: Create the noggin role
-  ipa_role:
+  iparole:
     name: "Self-service Portal Administrator"
     description: "Noggin admin user"
-    privilege:
-    - "Self-service Portal Administrators"
     user:
     - noggin
-    ipa_host: localhost
+    privilege:
-    ipa_user: admin
+    - "Self-service Portal Administrators"
-    ipa_pass: "{{ipa_admin_password}}"
+    ipaadmin_password: "{{ ipa_admin_password }}"
-    validate_certs: no
   tags:
   - ipa/server
   - config
   when: ipa_initial
 
-- name: Destroy admin ticket
-  command: kdestroy -A
-  tags:
-  - ipa/server
-  - keytab
-  - config
-  - krb5
-  when: ipa_initial
-
 
 - name: Set the members of the admin group
-  ipa_group:
+  ipagroup:
     name: admins
     user:
     - admin
     - fas_sync
-    ipa_host: localhost
+    ipaadmin_password: "{{ ipa_admin_password }}"
-    ipa_user: admin
-    ipa_pass: "{{ipa_admin_password}}"
-    validate_certs: no
   tags:
   - ipa/server
   - config