---

- include_tasks: install_{{ ansible_os_family }}.yml

- name: Deploy sssd config
  template: src=sssd.conf.j2 dest=/etc/sssd/sssd.conf owner=root group=root mode=0600
  notify: restart sssd

- name: Ensure nsswitch is using sssd
  lineinfile:
    dest: /etc/nsswitch.conf
    regexp: "{{ item.regexp }}"
    line: "{{ item.line }}"
  with_items:
    - regexp: '^passwd:.*'
      line: 'passwd:     files sss'
    - regexp: '^shadow:.*'
      line: 'shadow:     files sss'
    - regexp: '^group:.*'
      line: 'group:      files sss'

- name: Start and enable sssd service
  service: name=sssd state=started enabled=True

- name: Start oddjobd
  service: name=oddjobd state=started enabled=True
  when: ansible_distribution != 'Debian' or ansible_distribution_major_version is version('9', '>=')

- include_tasks: pam_{{ ansible_os_family }}.yml