samba-dc: Configure samba4 winbind

The *samba-dc* role now configures `winbindd` on domain controllers to support identity mapping on the local machine. This will allow domain users to log into the domain controller itself, e.g. via SSH. The Fedora packaging of *samba4* still has some warts. Specifically, it does not have a proper SELinux policy, so some work-arounds need to be put into place in order for confined processes to communicate with winbind.
2018-03-11 18:02:51 -05:00
parent e99db22765
commit 5a91cb731a
7 changed files with 91 additions and 0 deletions
--- a/samba-dc.yml
+++ b/samba-dc.yml
@@ -2,3 +2,8 @@
  roles:
  - kerberos
  - samba-dc
+  tasks:
+  - name: set samba configuration facts
+    set_fact:
+      workgroup: '{{ workgroup }}'
+    tags: always