samba-dc: Manage sudoers

Domain controllers only allow users in the *Domain Admins* AD group to
use `sudo` by default.  *dustin* and *jenkins* need to be able to apply
configuration policy to these machines, but they are not members of said
group.

group_vars/samba-dc.yml

@@ -21,3 +21,7 @@ collectd_processes:
 - name: smbd
 - name: krb5kdc
 - name: winbindd
+
+admin_users:
+- 'PYROCUFFLINK\dustin'
+- 'PYROCUFFLINK\jenkins'

samba-dc.yml

@@ -4,6 +4,7 @@
   - kerberos
   - dch-selinux
   - samba-dc
+  - sudo
   tasks:
   - name: set samba configuration facts
     set_fact: