Dustin C. Hatch
d39b2bcb19
Sometimes I need to configure a machine to be a domain member without actually adding it to the domain. Now I can by running `ansible-playbook` with `--skip-tags domain-join`
47 lines
1.0 KiB
YAML
47 lines
1.0 KiB
YAML
- name: ensure winbind use flags are set
|
|
copy:
|
|
src=winbind.p-use
|
|
dest=/etc/portage/package.use/samba-winbind
|
|
mode=0644
|
|
when: ansible_distribution == 'Gentoo'
|
|
tags:
|
|
- portage-config
|
|
- name: ensure winbind package is installed
|
|
package:
|
|
name={{ winbind_pkg }}
|
|
state=present
|
|
tags:
|
|
- install
|
|
|
|
- name: ensure winbind is configured
|
|
template:
|
|
src=winbind.conf.j2
|
|
dest=/etc/samba/winbind.conf
|
|
mode=0644
|
|
owner=root
|
|
group=root
|
|
notify: restart winbind
|
|
|
|
- name: ensure winbind service starts at boot
|
|
service:
|
|
name={{ winbind_svc }}
|
|
enabled=yes
|
|
|
|
- name: ensure krb5.conf.d directory exists
|
|
file:
|
|
path=/etc/krb5.conf.d
|
|
mode=0755
|
|
state=directory
|
|
- name: ensure default kerberos realm is configured
|
|
template:
|
|
src=default-realm.krb5.conf.j2
|
|
dest=/etc/krb5.conf.d/default-realm.conf
|
|
|
|
- name: ensure machine is a member of the domain
|
|
ads_member:
|
|
username: '{{ winbind_join_username }}'
|
|
password: '{{ winbind_join_password }}'
|
|
state: joined
|
|
tags:
|
|
- domain-join
|