From 3bed59055c40a2dcc2bf5b7187620976d4dd4dcd Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Wed, 22 Oct 2025 21:13:03 -0500
Subject: [PATCH] users: Do not apply sudo role on Samba DCs

Users, auth, etc. for domain controllers will be handled by the
`create-dc.yml` playbook.  I haven't decided exactly how this playbook
will get applied, I want to make sure the host provisioner is able to
successfully provision machines in the _samba-dc_ group nonetheless.
---
 users.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/users.yml b/users.yml
index 2caa5c0..7dd445f 100644
--- a/users.yml
+++ b/users.yml
@@ -1,4 +1,4 @@
-- hosts: sudo
+- hosts: 'sudo:!samba-dc'
   roles:
   - role: sudo
     tags: