diff options
Diffstat (limited to 'roles/ad/tasks')
-rw-r--r-- | roles/ad/tasks/main.yml | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/roles/ad/tasks/main.yml b/roles/ad/tasks/main.yml new file mode 100644 index 0000000..a8275e5 --- /dev/null +++ b/roles/ad/tasks/main.yml @@ -0,0 +1,39 @@ +--- +- name: ad get vars + include_vars: default.yml + +- name: ad get OS vars + include_vars: '{{ item }}' + with_first_found: + - '{{ ansible_distribution }}.yml' + - default.yml + +- name: ad get host-specific vars + include_vars: '{{ item }}' + with_first_found: + - files: + - '../hosts/{{ ansible_fqdn }}.yml' + skip: true + +- name: sssd conf + template: src="sssd.conf.{{ ansible_distribution }}" dest="{{ sssd_dir }}/sssd.conf" + notify: + - sssd restart + +- name: sssd ad_access_filter + lineinfile: dest="{{ sssd_dir }}/sssd.conf" regexp="^ad_access_filter = .*$" line="ad_access_filter = {{ ad_access_filter }}" + when: ad_access_filter is defined + notify: + - sssd restart + +- name: sssd simple_allow_users + lineinfile: dest="{{ sssd_dir }}/sssd.conf" regexp="^simple_allow_users = .*$" line="simple_allow_users = {{ simple_allow_users }}" + when: simple_allow_users is defined + notify: + - sssd restart + +- name: sssd start + service: name=sssd state=started + +- name: kerberos conf + template: src="krb5.conf.{{ ansible_distribution }}" dest="{{ krb5_conf_dir }}/krb5.conf" |