- name: ensure main kerberos configuration is set
  template:
    src=krb5.conf.j2
    dest=/etc/krb5.conf
- name: ensure kerberos configuration drop-in directory exists
  file:
    path=/etc/krb5.conf.d
    mode=0755
    state=directory