diff --git a/ad-server-replication/defaults/main.yml b/ad-server-replication/defaults/main.yml index e8197eb0a20a39fbcd3497a0b780894f948f8919..47c2db1223b2b0766d24e2b94abee674a0731726 100644 --- a/ad-server-replication/defaults/main.yml +++ b/ad-server-replication/defaults/main.yml @@ -3,3 +3,5 @@ ad_admin_password: samba-admin smb_model_prefork: false smb_prefork_children: 4 # since it is default in 4.10 +smb_domain: "{{ domain.split('.')[0].upper() }}" +REALM: "{{ domain.upper() }}" diff --git a/ad-server/defaults/main.yml b/ad-server/defaults/main.yml index e8197eb0a20a39fbcd3497a0b780894f948f8919..47c2db1223b2b0766d24e2b94abee674a0731726 100644 --- a/ad-server/defaults/main.yml +++ b/ad-server/defaults/main.yml @@ -3,3 +3,5 @@ ad_admin_password: samba-admin smb_model_prefork: false smb_prefork_children: 4 # since it is default in 4.10 +smb_domain: "{{ domain.split('.')[0].upper() }}" +REALM: "{{ domain.upper() }}" diff --git a/nfs-server/defaults/main.yml b/nfs-server/defaults/main.yml new file mode 100644 index 0000000000000000000000000000000000000000..b2424085004e2ae6a8be90c8580b6e0c560d64fa --- /dev/null +++ b/nfs-server/defaults/main.yml @@ -0,0 +1,4 @@ +--- + +nfs_krb: false +nfs_krb_primary_ad_server: "{{ ad_primary|default(hostvars[groups['servers_ad'][0]]['ansible_host']) }}" diff --git a/nfs-server/tasks/main.yml b/nfs-server/tasks/main.yml index 1f7efdf77bb73f1653b22f0560bd791ea49060b1..a3c4643ba2741e1a8be9670e22dd2d6076bfa76c 100644 --- a/nfs-server/tasks/main.yml +++ b/nfs-server/tasks/main.yml @@ -93,7 +93,7 @@ - name: create service principal # yamllint disable-line rule:line-length command: samba-tool spn add "nfs/{{ ansible_fqdn }}" "{{ ansible_hostname | upper }}$" - delegate_to: "{{ hostvars[groups['servers_ad'][0]]['ansible_host'] }}" + delegate_to: "{{ nfs_krb_primary_ad_server }}" tags: - nfs-server - service-principal @@ -103,7 +103,7 @@ command: samba-tool domain exportkeytab "/root/{{ ansible_fqdn }}.keytab" --principal "nfs/{{ ansible_fqdn }}" args: creates: "/root/{{ ansible_fqdn }}.keytab" - delegate_to: "{{ hostvars[groups['servers_ad'][0]]['ansible_host'] }}" + delegate_to: "{{ nfs_krb_primary_ad_server }}" tags: - nfs-server - service-principal @@ -112,7 +112,7 @@ synchronize: src: "/root/{{ ansible_fqdn }}.keytab" dest: "/root/{{ ansible_fqdn }}.keytab" - delegate_to: "{{ hostvars[groups['servers_ad'][0]]['ansible_host'] }}" + delegate_to: "{{ nfs_krb_primary_ad_server }}" tags: - nfs-server - service-principal @@ -144,7 +144,7 @@ file: path: "/root/{{ ansible_fqdn }}.keytab" state: absent - delegate_to: "{{ hostvars[groups['servers_ad'][0]]['ansible_host'] }}" + delegate_to: "{{ nfs_krb_primary_ad_server }}" tags: - nfs-server - service-principal