ad-server: refactor role according todos

ad-server/tasks/main.yml

@@ -38,9 +38,7 @@
     - domain-provision
     - password
 
-
 # provision smb-domain. passwords will be selected at random and safed to /root/smb-provision.log)
-# TODO: Evaluate if internal DNS-backend is powerful enough for usecase otherwise bind9 is needed
 
 - name: ensure domain is provisioned
   shell: samba-tool domain provision --use-rfc2307 --domain={{ smb_domain }} --server-role=dc --host-name={{ ansible_hostname }} --realm={{ REALM }} --dns-backend=NONE --adminpass={{ adminpass.password }}  2> /root/smb-provision.log
@@ -69,10 +67,11 @@
     - ad-server
     - service
 
-#- name: ensure samba-ad-dc unit is running, enabled and not masked
-# systemd: name=samba-ad-dc masked=no state=running enabled=yes
-- debug:
-    msg: "Ensure samba-ad-dc unit is not masked.  This functionality will come in ansible 2.2, you should refactor this role"  
+- name: ensure samba-ad-dc unit is running, enabled and not masked
+  systemd: name=samba-ad-dc masked=no state=running enabled=yes
+  tags: 
+    - ad-server
+    - service
 
 - name: ensure samba-ad-dc is running and enabled
   service: name=samba-ad-dc state=running enabled=yes
@@ -80,5 +79,4 @@
     - ad-server
     - service
 
-
 - meta: flush_handlers