roles/winbind: Configure Samba AD membership

The *winbind* role builds upon the *samba* role to configure the machine
as an Active Directory domain member.

roles/winbind/tasks/main.yml

@@ -0,0 +1,38 @@
+- name: ensure winbind use flags are set
+  copy:
+    src=winbind.p-use
+    dest=/etc/portage/package.use/samba-winbind
+    mode=0644
+  when: ansible_distribution == 'Gentoo'
+  tags:
+  - portage-config
+- name: ensure winbind package is installed
+  package:
+    name={{ winbind_pkg }}
+    state=present
+  tags:
+  - install
+
+- name: ensure winbind is configured
+  template:
+    src=winbind.conf.j2
+    dest=/etc/samba/winbind.conf
+    mode=0644
+    owner=root
+    group=root
+  notify: restart winbind
+
+- name: ensure winbind service starts at boot
+  service:
+    name={{ winbind_svc }}
+    enabled=yes
+
+- name: ensure krb5.conf.d directory exists
+  file:
+    path=/etc/krb5.conf.d
+    mode=0755
+    state=directory
+- name: ensure default kerberos realm is configured
+  template:
+    src=default-realm.krb5.conf.j2
+    dest=/etc/krb5.conf.d/default-realm.conf