configpolicy/roles/winbind/tasks/main.yml

47 lines
1.0 KiB
YAML

- name: ensure winbind use flags are set
copy:
src=winbind.p-use
dest=/etc/portage/package.use/samba-winbind
mode=0644
when: ansible_distribution == 'Gentoo'
tags:
- portage-config
- name: ensure winbind package is installed
package:
name={{ winbind_pkg }}
state=present
tags:
- install
- name: ensure winbind is configured
template:
src=winbind.conf.j2
dest=/etc/samba/winbind.conf
mode=0644
owner=root
group=root
notify: restart winbind
- name: ensure winbind service starts at boot
service:
name={{ winbind_svc }}
enabled=yes
- name: ensure krb5.conf.d directory exists
file:
path=/etc/krb5.conf.d
mode=0755
state=directory
- name: ensure default kerberos realm is configured
template:
src=default-realm.krb5.conf.j2
dest=/etc/krb5.conf.d/default-realm.conf
- name: ensure machine is a member of the domain
ads_member:
username: '{{ winbind_join_username }}'
password: '{{ winbind_join_password }}'
state: joined
tags:
- domain-join