<h1>Linux Active Directory Domain Management</h1>
This is a simple Ansible role that helps you automatically connect or disconnect a Linux machine from an Active Directory Domain using Kerberos and SSSD. This role has been tested on RedHat/CentOS versions 7-9, Ubuntu LTS versions 16-22, and Debian versions 8-10, as well as openSUSE versions 11-15.

# Requirements

- Ansible version 2.6 or higher
- Active Directory service account
- Configured NTP client
- Correct DNS settings

# Installation

Run the command: 

ansible-galaxy install EddyH85.linux_domain_mgmt

# Role Variables

File: `defaults/main.yml`
This role uses the following variables that you should set in your playbook:

```yaml
# Domain Information
join_domain: true # true/false - whether to join or leave the Active Directory Domain
DomainName: linuxlab.local # replace with your domain name
realm: LINUXLAB.LOCAL # replace this with your domain name in uppercase
Join_OU: OU=Server,OU=Germany,DC=linuxlab,DC=local # replace this with your LDAP path
# Credentials
Join_User: ADMDOMAIN
Join_User_Pass: admdomainpassword
# Permissions
PermitAdminUsers: Administrator # list your administrative users, separated by commas
PermitAdminGroups: LinuxAdmins # list your administrative groups, separated by commas

Example Playbook

---
- hosts: lx64*
  gather_facts: yes
  become: true
  roles:
    - EddyH85.linux_domain_mgmt

  vars:
    Join_User: tu-adjoin
    DomainName: linuxlab.de
    Join_User_Pass: Passw0rd
    realm: LINUXLAB.DE
    Join_OU: OU=Server,OU=Germany,OU=Linuxlab,DC=linuxlab,DC=de
    Join_User: ServiceUser
    Join_User_Pass: ServiceUserPWD
    PermitAdminUsers: Administrator
    PermitAdminGroups: D_LINUX_ADMINs
    join_domain: true

Testing

This role has been tested on the following Linux distributions:

• (open)SUSE 11-15
• RHEL/CentOS 7-9
• Debian 8-10
• Ubuntu LTS 16.04, 18.04, 20.04, 22.04

```