The secret values stored in this vault file were never actually used. They weren't even correct.
16 lines
363 B
YAML
16 lines
363 B
YAML
- import_playbook: samba-dc.yml
|
|
- hosts: samba-dc
|
|
roles:
|
|
- nsswitch
|
|
- system-auth
|
|
- sudo
|
|
tasks:
|
|
- name: ensure domain admins can use sudo
|
|
copy:
|
|
content: |
|
|
%domain\ admins ALL=(ALL) ALL
|
|
%{{ workgroup }}\\domain\ admins ALL=(ALL) ALL
|
|
dest: /etc/sudoers.d/10_domain-admins
|
|
mode: '0440'
|
|
validate: visudo -cf %s
|