--- - name: nsswitch settings for passwd lineinfile: backup: yes path: /etc/nsswitch.conf state: present regexp: '^passwd\:' line: 'passwd: compat ldap' # line: 'passwd: files ldap' - name: nsswitch settings for group lineinfile: backup: yes path: /etc/nsswitch.conf state: present regexp: '^group\:' line: 'passwd: compat ldap' # line: 'passwd: files ldap' - name: nsswitch settings for shadow lineinfile: backup: yes path: /etc/nsswitch.conf state: present regexp: '^shadow\:' line: 'passwd: compat ldap' # line: 'passwd: files ldap' - name: ldap configuration template: src: 'ldap.conf' dest: '/etc/ldap.conf' owner: 'root' group: 'root' mode: 0644 - name: Installing client packages apt: name: [ 'libnss-ldap' ] state: latest - name: Tweak idmap.conf ini_file: path: /etc/idmapd.conf section: Translation option: Method value: nsswitch mode: 0644