Files
ansible_samba_ad_dc/tasks/provision.yml
Jose 7e7c8a4b2d style 💎: Update samba provision task to remove log option
Updated the `no_log` option in the `samba_provision` task to always display passwords, making it easier to debug and understand the provisioning process.
2025-11-03 18:24:17 +01:00

24 lines
842 B
YAML

---
- name: check if domain already provisioned
ansible.builtin.stat:
path: /var/lib/samba/private/adsync.conf
register: samba_provisioned
- name: Provision the Samba AD DC
ansible.builtin.command: >
samba-tool domain provision
--use-rfc2307
--realm={{ samba_domain_info.realm }}
--domain={{ samba_domain_info.domain }}
--server-role={{ samba_domain_info.server_role }}
--dns-backend={{ samba_domain_info.dns_backend }}
--adminpass={{ samba_domain_info.adminpass }}
--option="interfaces={{ samba_domain_info.interfaces }}"
--option="bind interfaces only={{ samba_domain_info.bind_interfaces_only }}"
when: not samba_provisioned.stat.exists
register: samba_provision_output
changed_when: samba_provision_output.rc == 0
# no_log: true # You may toggle this if password should be hidden