---

- include_tasks: install_{{ ansible_os_family }}.yml

- name: Deploy sssd config
  template: src=sssd.conf.j2 dest=/etc/sssd/sssd.conf owner=root group=root mode=0600
  notify: restart sssd

- name: Ensure nsswitch is using sssd
  lineinfile:
    dest: /etc/nsswitch.conf
    regexp: "{{ item.regexp }}"
    line: "{{ item.line }}"
  with_items:
    - regexp: '^passwd:.*'
      line: 'passwd:     files sss'
    - regexp: '^shadow:.*'
      line: 'shadow:     files sss'
    - regexp: '^group:.*'
      line: 'group:      files sss'

- name: Start and enable sssd services
  service: name={{ item }} state=started enabled=yes
  with_items:
    - sssd
    - oddjobd

- include_tasks: pam_{{ ansible_os_family }}.yml