Initial commit erasing history

roles/ad_joined/tasks/main.yml

@@ -0,0 +1,4 @@
+- import_tasks: main_win.yml
+  when: ansible_connection == 'winrm'
+- import_tasks: main_lin.yml
+  when: ansible_connection == 'ssh'

roles/ad_joined/tasks/main_lin.yml

@@ -0,0 +1,34 @@
+- name: Enable create homedir on login
+  command: pam-auth-update --enable mkhomedir
+  become: true
+- name: Check whether we already joined
+  command: /bin/bash -c "/usr/sbin/realm list"
+  register: realm_list_results
+  - name: Set OU
+    set_fact:
+      ou_path: "OU={{locations[0]}},OU=Ucilnice"
+  - name: Show state
+    debug:
+      msg: "Host: {{inventory_hostname}}, OU: {{ou_path}}"
+  # - import_tasks: ne_sysprep.yaml
+  - name: "Rename"
+    # Racunalnik najprej preimenujmo, da ne bosta v domeni obenem 2 z istim imenom
+    hostname:
+      name: "{{inventory_hostname}}"
+    register: hostname_res
+
+- name: Join using realmd
+  expect:
+    command: realm join --user={{ad_join_user}} --computer-ou={{ou_path}} FRI1.UNI-LJ.SI
+    responses:
+      (?i)Password: "{{ad_join_password}}"
+  ignore_errors: yes
+  when: realm_list_results.stdout == ""
+
+- name: Copy sssd config
+  template:
+    src: sssd.conf
+    dest: "/etc/sssd/sssd.conf"
+    owner: root
+    mode: 0600
+

roles/ad_joined/tasks/main_win.yml

@@ -0,0 +1,49 @@
+- name: Set OU
+  set_fact:
+    ou_path: "OU={{locations[0]}},OU=Ucilnice,DC=fri1,DC=uni-lj,DC=si"
+- name: "Rename"
+  # Racunalnik najprej preimenujmo, da ne bosta v domeni obenem 2 z istim imenom
+  win_hostname:
+    name: "{{inventory_hostname}}"
+  register: hostname_res
+- name: "Reboot after hostname change"
+  win_reboot:
+  when: hostname_res.reboot_required
+- name: Stop Windows Update Service
+  win_service: 
+    name: wuauserv
+    state: stopped
+- name: Clear WSUS ID from registry
+  win_regedit: 
+    path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
+    name: "{{item}}"
+    state: absent
+    delete_key: yes
+  with_items:
+    - PingID
+    - AccountDomainSid
+    - SusClientId
+    - SusClientIDValidation
+- name: Start Windows Update Service
+  win_service: 
+    name: wuauserv
+    state: started
+- name: "Join domain"
+  win_domain_membership:
+    domain_admin_user: "{{adjoin_user}}"
+    domain_admin_password: "{{adjoin_password}}"
+    dns_domain_name: "{{domain_name}}"
+    domain_ou_path: "{{ou_path}}"
+    hostname: "{{inventory_hostname}}"
+    state: domain
+  register: domain_state
+- name: Reset WSUS authorization
+  win_command: wuauclt.exe /resetauthorization /detectnow
+  ignore_errors: yes
+- name: Update windows
+  win_command: wuauclt.exe /updatenow
+  ignore_errors: yes
+- name: Reboot
+  win_command: "shutdown /r"
+  when: domain_state.reboot_required
+

roles/ad_joined/templates/sssd.conf

@@ -0,0 +1,31 @@
+[sssd]
+config_file_version = 2
+domains = fri1.uni-lj.si
+enable_files_domain = False
+services = nss, pam
+
+[nss]
+filtered_groups = root
+filtered_users = root
+reconnection_retries = 3
+
+[pam]
+reconnection_retries = 3
+
+[domain/fri1.uni-lj.si]
+ad_domain = fri1.uni-lj.si
+ad_server = dcv1fri1.fri1.uni-lj.si,dcv2fri1.fri1.uni-lj.si
+ad_maximum_machine_account_password_age = 0
+ad_gpo_access_control = permissive
+ad_enabled_domains = fri1.uni-lj.si, student.uni-lj.si, fkkt1.uni-lj.si, ef1.uni-lj.si, fe1.uni-lj.si, ff.uni-lj.si, fmf.uni-lj.si, fu.uni-lj.si, pef.uni-lj.si
+krb5_realm = FRI1.UNI-LJ.SI
+ad_gpo_ignore_unreadable = True
+realmd_tags = manages-system joined-with-adcli
+cache_credentials = True
+id_provider = ad
+krb5_store_password_if_offline = True
+default_shell = /bin/bash
+ldap_id_mapping = True
+use_fully_qualified_names = True
+fallback_homedir = /home/%u@%d
+access_provider = ad