42 lines
950 B
YAML
42 lines
950 B
YAML
|
- name: Install sssd + samba + keyutil
|
||
|
|
apt:
|
||
|
|
name:
|
||
|
|
- sssd
|
||
|
|
- sssd-ad
|
||
|
|
- realmd
|
||
|
|
- samba-common-bin
|
||
|
|
- smbclient
|
||
|
|
- cifs-utils
|
||
|
|
- smbclient
|
||
|
|
state: latest
|
||
|
|
- name: Install kerberos utils
|
||
|
|
apt:
|
||
|
|
name:
|
||
|
|
- keyutils
|
||
|
|
- krb5-user
|
||
|
|
- name: Install PAM modules
|
||
|
|
apt:
|
||
|
|
name: libpam-modules
|
||
|
|
state: latest
|
||
|
|
- name: Enable create homedir on login
|
||
|
|
command: pam-auth-update --enable mkhomedir
|
||
|
|
become: true
|
||
|
|
- name: Check whether we already joined
|
||
|
|
command: /bin/bash -c "/usr/sbin/realm list"
|
||
|
|
register: realm_list_results
|
||
|
|
- name: Join using realmd
|
||
|
|
expect:
|
||
|
|
command: realm join --user=ad.join@FRI1.UNI-LJ.SI --computer-ou=OU=Ucilnice FRI1.UNI-LJ.SI
|
||
|
|
responses:
|
||
|
|
(?i)Password: "{{ad_join_password}}"
|
||
|
|
ignore_errors: yes
|
||
|
|
when: realm_list_results.stdout == ""
|
||
|
|
|
||
|
|
- name: Copy sssd config
|
||
|
|
template:
|
||
|
|
src: sssd.conf
|
||
|
|
dest: "/etc/sssd/sssd.conf"
|
||
|
|
owner: root
|
||
|
|
mode: 0600
|
||
|
|
|