From 4aded1e75cc8eb7251af847941694eac591881a6 Mon Sep 17 00:00:00 2001 From: "Dustin C. Hatch" Date: Wed, 1 Aug 2018 22:05:18 -0500 Subject: [PATCH] pyrocufflink: Ensure Samba security is correct Usually, the *samba* role is deployed as a dependency of the *winbind* role, which explicitly sets `samba_security` to `ads`. The new *fileserver* role also depends on the *samba* role, but it does NOT sett that variable. This can cause `smb.conf` to be rewritten with a different value whenever one or the other role is applied. Explicitly setting the `samba_security` variable at the group level ensures that the value is consistent no matter how the *samba* role is applied. Since all domain member machines need the same value, regardless of what function they perform, this is safe. --- group_vars/pyrocufflink/main.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/group_vars/pyrocufflink/main.yml b/group_vars/pyrocufflink/main.yml index 67518c9..44fba34 100644 --- a/group_vars/pyrocufflink/main.yml +++ b/group_vars/pyrocufflink/main.yml @@ -1,4 +1,5 @@ krb5_realm: PYROCUFFLINK.BLUE +samba_security: ads samba_use_winbind: true pam_winbind: true nss_winbind: true