ad-auth: make admin group configurable

ad-auth/defaults/main.yml

+---
+
+ad_admin_group: admin

ad-auth/files/sudo/admin

-%admin ALL=(ALL:ALL) ALL

ad-auth/tasks/sudo.yml

@@ -2,7 +2,7 @@
 # file: roles/ad-auth/tasks/sudo.yml
 
 - name: ensure users of group admin are in the sudoers
-  copy: src=sudo/admin dest=/etc/sudoers.d/admin owner=root group=root mode=0440
+  template: src=sudo.j2 dest=/etc/sudoers.d/admin owner=root group=root mode=0440
   notify:
     - check sudo config
   tags:

ad-auth/templates/sudo.j2

+%{{ ad_admin_group }} ALL=(ALL:ALL) ALL