ad-server: fix bugs noted on buster upgrade

ad-server-replication/tasks/main.yml

@@ -10,6 +10,13 @@
   tags:
     - ad-server
 
+- name: ensure winbind is for some reasons installed
+  apt:
+    name: winbind
+    state: present
+  tags:
+    - ad-server
+
 - name: figure out if domain is provisioned
   stat:
     path: "/var/lib/samba/sysvol/{{ domain }}"

ad-server-replication/templates/smb.conf.j2

@@ -19,7 +19,7 @@
         kdc:renewal lifetime = {{ renewal_lifetime }}
 
         tls enabled = yes
-        tls cafile = /etc/ssl/certs/rwth_chain.pem
+        tls cafile = {{smb_tls_cacert}}
         tls keyfile = {{smb_tls_key}}
         tls certfile = {{smb_tls_cert}}
 

ad-server/templates/smb.conf.j2

@@ -19,8 +19,7 @@
         kdc:renewal lifetime = {{ renewal_lifetime }}
 
         tls enabled = yes
-        tls cafile = {{smb_tls_chain}}
-        #tls cafile = /etc/ssl/certs/rwth_chain.pem
+        tls cafile = {{smb_tls_cacert}}
         tls keyfile = {{smb_tls_key}}
         tls certfile = {{smb_tls_cert}}