Create an account works

create-user.yml

@@ -32,11 +32,7 @@
       when: item is undefined
       with_items:
         - "{{ username }}"
-        - "{{ fullname }}"
-        - "{{ email }}"
-        - "{{ phone }}"
         - "{{ role_type }}"
-        - "{{ pubkey }}"
       delegate_to: 127.0.0.1
 
     - name: Check role
@@ -49,14 +45,42 @@
 - hosts: proidentity
   vars_files:
     - vars/auth.yml
-  roles:
-    - user_duplicate
+    - vars/secure.yml
+  vars_prompt:
+    - name: first
+      prompt: First name of the user account?
+      private: no
+
+    - name: last
+      prompt: Last name of the user account?
+      private: no
+
+    - name: email
+      prompt: E-Mail of the user account?
+      private: no
+
+    - name: phone
+      prompt: Phone of the user account?
+      private: no
+
+    - name: pubkey
+      prompt: Absolute path to the public key of the user account?
+      private: no
+  tasks:
+    - name: Authenticate
+      shell: "echo '{{ idp_adm_passwd }}' | kinit admin"
+
+    - name: Configure identities
+      block:
+        - name: Create account
+          command: ipa user-add {{ username }} --first="{{ first }}" --last="{{ last }}" --email="{{ email }}" --phone="{{ phone }}" --sshpubkey="{{ lookup('file', pubkey) }}" --random
+          register: ipa_result
+
+        - set_fact:
+            random_passwd: "{{ ipa_result.stdout | regex_search(regexp,'\\1') }}"
+          vars:
+            regexp: '.*Random password: ([^\n]+)'
 
-- hosts: proidentity
-  vars_files:
-    - vars/auth.yml
-  roles:
-    - user_identity_save
 
 # VPN PROFILE
 
@@ -69,5 +93,18 @@
 # SUMMARY
 
 - hosts: proidentity
-  roles:
-    - user_info
+  tasks:
+    - name: Account information
+      block:
+        - name: Print
+          debug:
+            msg:
+              - "Credentials:"
+              - ""
+              - "  Username: {{ username }}"
+              - "  Password: {{ random_passwd }}"
+              - ""
+              - "The OpenVPN profile is located at /tmp/{{ username }}.ovpn on this computer"
+
+        - name: Clean up
+          meta: clear_facts

setup_users.yml

@@ -28,6 +28,7 @@
   tasks:
     - name: Authenticate
       shell: "echo '{{ idp_adm_passwd }}' | kinit admin"
+      no_log: true
 
     - name: Configure default shell
       command: ipa config-mod --defaultshell=/bin/bash