files/replicate.sh

@@ -9,4 +9,6 @@ fi
 
 ipa-client-install -U -p admin -w $ADMIN_PASSWORD --server=ipa-replica2.actcur.com --domain actcur.com  --mkhomedir  --force-join
 
-ipa-replica-install --skip-mem-check
+ipa-replica-install --skip-mem-check
+
+ipa-ca-install

tasks/main.yml

@@ -25,6 +25,10 @@
     src: files/replicate.sh
     dest: /scripts/replicate.sh
 
+- name: Disable SELinux
+  ansible.posix.selinux:
+    state: disabled
+    
 # create symlink for certs if letsencrypt is set up
 - name: check if letsencrypt is set up
   ansible.builtin.command: '[ -d "/etc/letsencrypt/" ]'