diff --git a/ansible_deploy_dc/add_samba_users.yml b/ansible_deploy_dc/add_samba_users.yml new file mode 100644 index 0000000..d2bc7ec --- /dev/null +++ b/ansible_deploy_dc/add_samba_users.yml @@ -0,0 +1,20 @@ +--- + +- name: Создание пользователей контроллера домена + hosts: dctest + vars_files: + - users.yml + + tasks: + - name: Пользователи в домене Samba + ansible.builtin.command: samba-tool user list + register: user_list + - name: Список пользователей + ansible.builtin.debug: + var: user_list.stdout_lines + + - name: Создаются пользователя домена + ansible.builtin.command: samba-tool user create {{ item.name }} {{ item.password }} + loop: "{{ samba_users }}" + when: not item.name in user_list.stdout_lines + no_log: true diff --git a/ansible_deploy_dc/check_primary_dc.yml b/ansible_deploy_dc/check_primary_dc.yml index eb02942..7c3a571 100644 --- a/ansible_deploy_dc/check_primary_dc.yml +++ b/ansible_deploy_dc/check_primary_dc.yml @@ -48,10 +48,9 @@ responses: # "Password for {{ dc_details.admin }}@{{ dc_details.realm_u }}:": "{{ dc_details.adminpass }}" "Password for .*:": "{{ dc_details.adminpass }}" - # you don't want to show passwords in your logs - #no_log: true echo: true timeout: 5 + no_log: true - name: Текущие билеты Kerberos ansible.builtin.shell: "klist" diff --git a/ansible_deploy_dc/users.yml b/ansible_deploy_dc/users.yml new file mode 100644 index 0000000..a9750dd --- /dev/null +++ b/ansible_deploy_dc/users.yml @@ -0,0 +1,6 @@ +samba_users: + - name: ivanov + password: P@ssw0rd + + - name: petrov + password: P@ssw0rd \ No newline at end of file