Update to 2021-11-29 16:00

roles/ampache/tasks/main.yml

@@ -48,6 +48,7 @@
     - "{{ ampache_root_dir }}/data/music"
     - "{{ ampache_root_dir }}/data/video"
     - "{{ ampache_root_dir }}/backup"
+  failed_when: False # Don't fail when a fuse FS is mount on /music for example
   tags: ampache
 
 - when: ampache_install_mode != 'none'

roles/samba/defaults/main.yml

@@ -38,9 +38,6 @@ samba_serve_homes: False
 # Password used for rsyncd. Used to fetch sysvol from the primary DC
 samba_sysvol_rsync_pass: "{{ samba_dc_admin_pass | password_hash('sha512', 65534 | random(seed=samba_realm) | string) }}"
 
-# Wether to allow simple binds over unencrypted connections
-samba_allow_insecure_ldap: False
-
 # The following are for the password policy to apply to the domain
 samba_base_pwd_policy:
   complexity: 'off'

roles/samba/tasks/facts.yml

@@ -38,12 +38,12 @@
   when: samba_i_am_primary_dc == True
   tags: samba
 
-  # No sssd compiled against TIS samba4 yet for el8
+# sssd-ad can now be installed on EL8 with samba4 build from Tranquil IT
-  # so disable ad_auth for samba DC in this case
+# so don't turn ad_auth off anymore
-- name: Disable ad_auth for samba DC
+#- name: Disable ad_auth for samba DC
-  set_fact: ad_auth=False
+#  set_fact: ad_auth=False
-  when:
+#  when:
-    - samba_role in [ 'dc', 'rodc' ]
+#    - samba_role in [ 'dc', 'rodc' ]
-    - ansible_os_family == 'RedHat'
+#    - ansible_os_family == 'RedHat'
-    - ansible_distribution_major_version is version('8','>=')
+#    - ansible_distribution_major_version is version('8','>=')
-  tags: samba
+#  tags: samba

roles/samba/templates/smb.conf.j2

@@ -14,11 +14,6 @@
 {% if samba_dns_forwarder is defined %}
   dns forwarder = {{ samba_dns_forwarder }}
 {% endif %}
-{% if samba_allow_insecure_ldap %}
-  ldap server require strong auth = no
-{% else %}
-  ldap server require strong auth = allow_sasl_over_tls
-{% endif %}
 {% elif samba_role == 'member' %}
   server role = member server
 {% elif samba_role == 'standalone' %}

roles/seafile/templates/seafile-gc.timer.j2

@@ -2,7 +2,7 @@
 Description=Seafile Garbage Collect service
 
 [Timer]
-OnCalendar=Sun *-*-* 02:10:00
+OnCalendar=Sun *-*-* 03:10:00
 Persistent=true
 
 [Install]