- hosts: samba-dc
  gather_facts: false
  tasks:
  - name: clear facts
    meta: clear_facts
- hosts: samba-dc
  gather_facts: true

- hosts: samba-dc
  serial: 1
  roles:
  - kerberos
  - dch-selinux
  - samba-dc
  - role: samba-cert
    tags: samba-cert
  tasks:
  - name: set samba configuration facts
    set_fact:
      workgroup: '{{ workgroup }}'
    tags: always