The reason for this is to avoid having to do the same or similar things
over and over again for each host in the play, especially since these
operations are delegated to the IPA server, i.e. had to run sequentially
host after host in order to avoid race conditions.
To achieve this, the IPA client related group variables are prepared in
suitable structures in `prepare-ipa-info.yml` and consumed by
`common.yml`, `hbac.yml` and `sudo.yml`, which do most operations in one
go per e.g. host group on the affected IPA server(s).
Additionally:
- Remove compat for legacy `fas_client_groups`, only check for its
presence and warn.
- Remove the prepared but masked out task to manage password-less sudo
access.
- Make yamllint a little happier on the changed files.
Signed-off-by: Nils Philippsen <nils@redhat.com>
3d1c5218f7