diff --git a/ad-auth/tasks/sssd.yml b/ad-auth/tasks/sssd.yml index 35926a722e5209c560d55b9c26e41ae10cdd4b3c..d2983b97444a248b3edf3b2f19e7dc3d5baf0a60 100644 --- a/ad-auth/tasks/sssd.yml +++ b/ad-auth/tasks/sssd.yml @@ -30,6 +30,7 @@ - name: get a kerberos ticket shell: echo "{{ lookup('passwordstore', 'samba-admin') }}" | kinit Administrator when: debian_version == "jessie" + no_log: True - name: ensure pexpect is installed apt: name=python-pexpect state=installed when: debian_version == "stretch" @@ -39,6 +40,7 @@ responses: "Password for Administrator.*": "{{ lookup('passwordstore', 'samba-admin') }}" when: debian_version == "stretch" + no_log: True - name: leave any other realm command: realm leave register: result diff --git a/ad-server/tasks/main.yml b/ad-server/tasks/main.yml index 1322f314b33ac1f9f8255ed188f9316621542ea2..fabc75d63632c7b94bca53677e2d1e0c0647a7aa 100644 --- a/ad-server/tasks/main.yml +++ b/ad-server/tasks/main.yml @@ -32,6 +32,7 @@ local_action: pass name="samba-admin" state=present generate=20 store=FSMPI_PASSWORD_STORE_DIR limit=yes register: adminpass when: domain_provisioned.stat.exists == False + no_log: True tags: - ad-server - domain-provision @@ -44,6 +45,7 @@ - name: ensure domain is provisioned shell: samba-tool domain provision --use-rfc2307 --domain={{ smb_domain }} --server-role=dc --host-name={{ ansible_hostname }} --realm={{ REALM }} --dns-backend=NONE --adminpass={{ adminpass.password }} 2> /root/smb-provision.log when: domain_provisioned.stat.exists == False + no_log: True tags: - ad-server - domain-provision