refactor ♻️: Refactoring the Ansible playbook to include new tasks for joining an Active Directory domain.

Added tasks to install required packages, configure Kerberos and Samba, and join the domain. This refactoring improves the automation of the setup process.
This commit is contained in:
2025-10-08 19:04:53 +02:00
parent ef115151e4
commit 180a1f8639
6 changed files with 91 additions and 1 deletions

14
templates/smb.conf.j2 Normal file
View File

@@ -0,0 +1,14 @@
[global]
workgroup = {{ ad_realm.split('.')[0] }}
security = ads
realm = {{ ad_realm }}
winbind use default domain = true
winbind offline logon = false
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
idmap config * : backend = tdb
idmap config * : range = 10000-20000
idmap config {{ ad_realm.split('.')[0] }} : backend = rid
idmap config {{ ad_realm.split('.')[0] }} : range = 20001-999999
template shell = /bin/bash
template homedir = /home/%U