Commit 2b9e7f2d authored by Hinrikus Wolf's avatar Hinrikus Wolf
Browse files

ad-server: refactor role according todos

parent a533c7fb
...@@ -38,9 +38,7 @@ ...@@ -38,9 +38,7 @@
- domain-provision - domain-provision
- password - password
# provision smb-domain. passwords will be selected at random and safed to /root/smb-provision.log) # provision smb-domain. passwords will be selected at random and safed to /root/smb-provision.log)
# TODO: Evaluate if internal DNS-backend is powerful enough for usecase otherwise bind9 is needed
- name: ensure domain is provisioned - name: ensure domain is provisioned
shell: samba-tool domain provision --use-rfc2307 --domain={{ smb_domain }} --server-role=dc --host-name={{ ansible_hostname }} --realm={{ REALM }} --dns-backend=NONE --adminpass={{ adminpass.password }} 2> /root/smb-provision.log shell: samba-tool domain provision --use-rfc2307 --domain={{ smb_domain }} --server-role=dc --host-name={{ ansible_hostname }} --realm={{ REALM }} --dns-backend=NONE --adminpass={{ adminpass.password }} 2> /root/smb-provision.log
...@@ -69,10 +67,11 @@ ...@@ -69,10 +67,11 @@
- ad-server - ad-server
- service - service
#- name: ensure samba-ad-dc unit is running, enabled and not masked - name: ensure samba-ad-dc unit is running, enabled and not masked
# systemd: name=samba-ad-dc masked=no state=running enabled=yes systemd: name=samba-ad-dc masked=no state=running enabled=yes
- debug: tags:
msg: "Ensure samba-ad-dc unit is not masked. This functionality will come in ansible 2.2, you should refactor this role" - ad-server
- service
- name: ensure samba-ad-dc is running and enabled - name: ensure samba-ad-dc is running and enabled
service: name=samba-ad-dc state=running enabled=yes service: name=samba-ad-dc state=running enabled=yes
...@@ -80,5 +79,4 @@ ...@@ -80,5 +79,4 @@
- ad-server - ad-server
- service - service
- meta: flush_handlers - meta: flush_handlers
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment