[PR #8320/a71e1913 backport][stable-7] keycloak_user_federation: fix diff of empty krbPrincipalAttribute

[patchback]

This is a backport of PR #8320 as merged into main (a71e191).

SUMMARY

krbPrincipalAttribute is supposed to have an empty string as a valid value.

community.general/plugins/modules/keycloak_user_federation.py

Line 346 in bc609d7

When this is empty, the LDAP user will be looked based on LDAP username corresponding

Without this bugfix, an ansible-playbook ... --check --diffrun will always show an empty string in the diff if you pass en empty string to config.krbPrincipalAttribute.

TASK [kc1 - realm-1 - test-2 - Create or update a Keycloak kerberos enabled user_federation] ********************************************************************************************************************************************
--- before
+++ after
@@ -17,6 +17,7 @@
         "importEnabled": "false",
         "kerberosRealm": "EXAMPLE.NET",
         "keyTab": "/mnt/ad2",
+        "krbPrincipalAttribute": "",
         "pagination": "false",
         "priority": "0",
         "rdnLDAPAttribute": "sAMAccountName",

ISSUE TYPE

• Bugfix Pull Request

COMPONENT NAME

keycloak_user_federation

[ansibullbot]

cc @eikef @laurpaum @mattock @ndclt
click here for bot help