The *samba-dc* role now configures `winbindd` on domain controllers to support identity mapping on the local machine. This will allow domain users to log into the domain controller itself, e.g. via SSH. The Fedora packaging of *samba4* still has some warts. Specifically, it does not have a proper SELinux policy, so some work-arounds need to be put into place in order for confined processes to communicate with winbind.
10 lines
168 B
YAML
10 lines
168 B
YAML
- hosts: samba-dc
|
|
roles:
|
|
- kerberos
|
|
- samba-dc
|
|
tasks:
|
|
- name: set samba configuration facts
|
|
set_fact:
|
|
workgroup: '{{ workgroup }}'
|
|
tags: always
|