roles/samba-dc: Deploy a Samba AD DC
The *samba-dc* role installs Samba on the managed node and configures it as an Active Directory Domain controller. A custom module, `samba_domain` handles the provisioning using `samba-tool domain provision` in an idempotent way.
This commit is contained in:
7
roles/samba-dc/vars/defaults.yml
Normal file
7
roles/samba-dc/vars/defaults.yml
Normal file
@@ -0,0 +1,7 @@
|
||||
samba_dc_packages:
|
||||
- krb5-workstation
|
||||
- openldap-clients
|
||||
- samba-dc
|
||||
- samba-dc-bind-dlz
|
||||
- samba-winbind-clients
|
||||
- tdb-tools
|
||||
19
roles/samba-dc/vars/main.yml
Normal file
19
roles/samba-dc/vars/main.yml
Normal file
@@ -0,0 +1,19 @@
|
||||
samba_selinux_contexts:
|
||||
- path: /var/lib/samba/bind-dns/dns.keytab
|
||||
setype: named_conf_t
|
||||
- path: /var/lib/samba/bind-dns/named.conf.*
|
||||
setype: named_conf_t
|
||||
- path: /var/lib/samba/bind-dns/dns(/.*)?
|
||||
setype: named_var_run_t
|
||||
samba_firewall:
|
||||
- dns
|
||||
- kerberos
|
||||
- 135/tcp
|
||||
- ldap
|
||||
- 389/udp
|
||||
- samba
|
||||
- kpasswd
|
||||
- ldaps
|
||||
- 3268/tcp
|
||||
- 3269/tcp
|
||||
- 49152-65535/tcp
|
||||
Reference in New Issue
Block a user