roles/samba-dc: Conditionally configure BIND9_DLZ

This commit adjusts the tasks in the *samba-dc* role to use a
conditional include to restrict tasks relating to the BIND9_DLZ plugin
only to hosts that are configured to use it.

roles/samba-dc/tasks/bind9-dlz.yml

@@ -0,0 +1,12 @@
+- name: ensure bind9 dlz plugin is installed
+  package:
+    name={{ samba_bind_dlz_pkg }}
+    state=present
+
+- name: ensure selinux file contexts are correct
+  sefcontext:
+    target={{ item.path }}
+    setype={{ item.setype }}
+    state=present
+  with_items: '{{ samba_selinux_contexts }}'
+  notify: restore samba file contexts

roles/samba-dc/tasks/main.yml

@@ -13,13 +13,9 @@
   tags:
   - install
 
-- name: ensure selinux file contexts are correct
+- name: ensure bind9 dlz plugin is configured
-  sefcontext:
+  include_tasks: bind9-dlz.yml
-    target={{ item.path }}
+  when: samba_dc_dns_backend|d == 'BIND9_DLZ'
-    setype={{ item.setype }}
-    state=present
-  with_items: '{{ samba_selinux_contexts }}'
-  notify: restore samba file contexts
 
 - name: ensure kerberos is configured
   template:

roles/samba-dc/vars/defaults.yml

@@ -5,6 +5,6 @@ samba_dc_packages:
 - ldb-tools
 - openldap-clients
 - samba-dc
-- samba-dc-bind-dlz
 - samba-winbind-clients
 - tdb-tools
+samba_bind_dlz_pkg: samba-dc-bind-dlz