AD_join

Role for joining Active Directory on Debian and Ubuntu systems.

Role Variables

! defaults/main.yml

• ad_pkgs_update: Whether to update packages (True or False)
• ad_realm: Kerberos realm for the domain
• ad_domain: Domain to connect to
• ad_ou: Organizational Unit where the computer object is added
• ad_admin_username: Username for joining AD
• ad_admin_password: Password for the above user
• ad_other_domain_to_realm: Additional realms for the domain (optional)
• ad_permit_groups: Groups allowed to access the joined machine (optional)
• ad_default_shell: Default shell for AD users
• ad_home_dir: Default home directory for AD users
• ad_replace_sss_conf: Replace or just add to the /etc/pam.d/common-session file
• ad_reboot_if_require: Reboot the system after joining AD if needed
• ad_config_ssh: Enable or disable SSH configuration
• ad_ssh_display_motd: Show Message of the Day on SSH login
• ad_ssh_banner: Show a banner on SSH login
• banner_header: Content of the SSH banner

! vars/main.yml

• sftp_server_location: Location for SFTP server in SSH config
• ad_pkgs: List of packages to install with this role
• banner_file: Location of the SSH banner file

Example Playbook

Here’s how to use this role, including variable options:

    - hosts: servers
      roles:
         - thystips.AD_join

License

GPLv3

Author Information

ThysTips contact@thystips.net
Gitlab: https://gitlab.com/thystips
Github: https://github.com/thystips