- name: Install required packages
  apt:
    name:
      - realmd
      - sssd
      - libpam-mount
      - heimdal-clients

- name: Remove krb5-user
  apt:
    name:
      krb5-user
    state: absent

- name: Set OU
  set_fact:
    ou_path: "OU={{locations[0]}},OU=Ucilnice"

- name: Show state
  debug:
    msg: "Host: {{inventory_hostname}}, OU: {{ou_path}}"
  # - import_tasks: ne_sysprep.yaml

- name: "Rename"
  # Racunalnik najprej preimenujmo, da ne bosta v domeni obenem 2 z istim imenom
  hostname:
    name: "{{inventory_hostname}}"
  register: hostname_res

- name: Check whether we already joined
  command: /bin/bash -c "/usr/sbin/realm list"
  register: realm_list_results

- name: Join using realmd
  expect:
    command: realm join --user={{ad_join_user}} --computer-ou={{ou_path}} FRI1.UNI-LJ.SI
    responses:
      (?i)Password: "{{ad_join_password}}"
  ignore_errors: yes
  when: realm_list_results.stdout == ""

- name: Copy sssd config
  template:
    src: sssd.conf
    dest: "/etc/sssd/sssd.conf"
    owner: root
    mode: 0600

- name: Configure libpam-mount
  copy:
    src: pam_mount.conf.xml
    dest: /etc/security/pam_mount.conf.xml

- name: Enable libpam-mount
  command: pam-auth-update --enable libpam-mount
  become: true

- name: Disable libpam-mkhomedir
  command: pam-auth-update --disable mkhomedir
  become: true

- name: Restart sssd
  service:
    name: sssd
    state: restarted