- name: ensure winbind use flags are set
  copy:
    src=winbind.p-use
    dest=/etc/portage/package.use/samba-winbind
    mode=0644
  when: ansible_distribution == 'Gentoo'
  tags:
  - portage-config
- name: ensure winbind package is installed
  package:
    name={{ winbind_pkg }}
    state=present
  tags:
  - install

- name: ensure winbind is configured
  template:
    src=winbind.conf.j2
    dest=/etc/samba/winbind.conf
    mode=0644
    owner=root
    group=root
  notify: restart winbind

- name: ensure winbind service starts at boot
  service:
    name={{ winbind_svc }}
    enabled=yes

- name: ensure krb5.conf.d directory exists
  file:
    path=/etc/krb5.conf.d
    mode=0755
    state=directory
- name: ensure default kerberos realm is configured
  template:
    src=default-realm.krb5.conf.j2
    dest=/etc/krb5.conf.d/default-realm.conf

- name: ensure machine is a member of the domain
  ads_member:
    username: '{{ winbind_join_username }}'
    password: '{{ winbind_join_password }}'
    state: joined
  tags:
  - domain-join