Debian package variables missing for ipaserver role

[Nihlus]

Debian has, in the past, not had ipaserver packaged for it. While it's not complete, the server packaging is well on its way and is working rather well on test systems. Using ansible-freeipa to install and manage the server is currently not possible without a patch or workaround, however, as the package names differ from the defaults.

The module already supports Ubuntu as a target, and Debian does not require any other configuration other than what's already in the roles/ipaserver/vars/Ubuntu.yml file to work. It'd be nice if a Debian.yml file could be added so end users don't have to either patch the module or override the variables in some other way.

[rjeffman]

The Debian files had been removed since it did not provide a build anymore and the versions there were not supported anymore.

I can recreate the files for the new version, but I need some pointers on how to install the packages to test it.

[Nihlus]

At the moment, the freeipa-server package is not out of experimental (it comes and goes depending on the surrounding packages right now) as work is still ongoing. I'm currently hosting an unofficial backport for Debian 11, however, which can be used for testing if you'd like.

Add the following to /etc/apt/sources.list.d/algiz-freeipa.list:

deb [signed-by=/usr/share/keyrings/algiz-freeipa.gpg] https://repo.algiz.nu/freeipa bullseye main

and place the signing key into /usr/share/keyrings/algiz-freeipa.gpg. There's also an untested Debian 12 backport in there, but I don't recommend testing against it.

[rjeffman]

As we don't support unsupported packages, I'll keep this issue open.

If I miss the update on the Debian package, please comment here that the package makes, at least, into testing, so we can manage the role vars files (ipaserver, ipareplica and ipabackup).

[Nihlus]

Will do!