ipauser does not support userauthtype: passkey

[parmstro]

Version Information

ansible-galaxy collection list redhat.rhel_idm

/home/parmstro/.ansible/collections/ansible_collections

Collection Version

---

redhat.rhel_idm 1.11.1

/usr/share/ansible/collections/ansible_collections

Collection Version

---

redhat.rhel_idm 1.11.1

Sample code:

---

- name: "Ensure passkey auth"
  when: piv_user_authtypes[0] == "None"
  ansible.builtin.set_fact:
    piv_user_authtypes: "{{ [ 'passkey' ] }}"

- name: "Assign auth types to user"
  redhat.rhel_idm.ipauser:
    action: "user"
    ipaadmin_password: "{{ ipa_password }}"
    ipaadmin_principal: "{{ ipa_principal }}"
    name: "{{ piv_current_username }}"
    userauthtype: "{{ piv_user_authtypes }}"
    state: present

Actual result:

TASK [Assign auth types to user] ***********************************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "value of userauthtype must be one or more of: password, radius, otp, pkinit, hardened, idp, . Got no match for: passkey"}

Expected result:

TASK [Assign auth types to user] ***********************************************************************************************************************************************************
changed: [localhost]

PLAY RECAP *************************************************************************************************************************************************************
localhost : ok=7 changed=1 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0

[rjeffman]

We currently have no support for passkey attributes.

Support should be added in the following plugins:

• ipaconfig
• ipahost
• ipaservice
• ipauser

And a new plugin for passkeyconfig is also needed.