ansible_samba_ad_dc/tasks/kerberos.yml

---
- name: Extract krb5.conf path from provision output
  # The samba-tool output usually contains the path on a specific line.
  # We extract the path using regex and the 'search' filter.
  ansible.builtin.set_fact:
    krb5_conf_path: "{{ samba_provision_output.stdout | regex_search('krb5.conf file is located at (.*)', '\\1') | first }}"
  when: samba_provision_output.stdout is defined

- name: Copy krb5.conf to /etc/krb5.conf
  ansible.builtin.copy:
    src: "{{ krb5_conf_path }}"
    dest: /etc/krb5.conf
    owner: root
    group: root
    mode: '0644'
  # Only run this if the provision was successful (changed)
  when: samba_provision_output.changed