- hosts: samba-dc
  serial: 1
  roles:
  - kerberos
  - dch-selinux
  - samba-dc
  - role: samba-cert
    tags: samba-cert
  tasks:
  - name: set samba configuration facts
    set_fact:
      workgroup: '{{ workgroup }}'
    tags: always