aboutsummaryrefslogtreecommitdiff
path: root/roles/ad/tasks
diff options
context:
space:
mode:
Diffstat (limited to 'roles/ad/tasks')
-rw-r--r--roles/ad/tasks/main.yml39
1 files changed, 39 insertions, 0 deletions
diff --git a/roles/ad/tasks/main.yml b/roles/ad/tasks/main.yml
new file mode 100644
index 0000000..a8275e5
--- /dev/null
+++ b/roles/ad/tasks/main.yml
@@ -0,0 +1,39 @@
+---
+- name: ad get vars
+ include_vars: default.yml
+
+- name: ad get OS vars
+ include_vars: '{{ item }}'
+ with_first_found:
+ - '{{ ansible_distribution }}.yml'
+ - default.yml
+
+- name: ad get host-specific vars
+ include_vars: '{{ item }}'
+ with_first_found:
+ - files:
+ - '../hosts/{{ ansible_fqdn }}.yml'
+ skip: true
+
+- name: sssd conf
+ template: src="sssd.conf.{{ ansible_distribution }}" dest="{{ sssd_dir }}/sssd.conf"
+ notify:
+ - sssd restart
+
+- name: sssd ad_access_filter
+ lineinfile: dest="{{ sssd_dir }}/sssd.conf" regexp="^ad_access_filter = .*$" line="ad_access_filter = {{ ad_access_filter }}"
+ when: ad_access_filter is defined
+ notify:
+ - sssd restart
+
+- name: sssd simple_allow_users
+ lineinfile: dest="{{ sssd_dir }}/sssd.conf" regexp="^simple_allow_users = .*$" line="simple_allow_users = {{ simple_allow_users }}"
+ when: simple_allow_users is defined
+ notify:
+ - sssd restart
+
+- name: sssd start
+ service: name=sssd state=started
+
+- name: kerberos conf
+ template: src="krb5.conf.{{ ansible_distribution }}" dest="{{ krb5_conf_dir }}/krb5.conf"
bgstack15