From b411d4d96c0c5e17354a3ace8aa2dbb4e8b8ce86 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Wed, 28 Nov 2018 00:40:50 +0100 Subject: [PATCH] Checking the permissions and other stuff on SAMBA setup. --- roles/nethcfg/tasks/samba.yml | 65 +++++++++++++++-------------------- 1 file changed, 27 insertions(+), 38 deletions(-) diff --git a/roles/nethcfg/tasks/samba.yml b/roles/nethcfg/tasks/samba.yml index 43d1419..73691a5 100644 --- a/roles/nethcfg/tasks/samba.yml +++ b/roles/nethcfg/tasks/samba.yml @@ -11,6 +11,20 @@ # SAMBA +- name: Checking for default SAMBA behaviour + shell: /sbin/e-smith/db configuration getprop smb HomeAdmStatus + register: check_smbbehavior + changed_when: "'enabled' not in check_smbbehavior" + ignore_errors: yes + +- name: Configuring standard SAMBA behaviour on shared folders + shell: /sbin/e-smith/db configuration setprop smb HomeAdmStatus enabled InheritOwner yes ShareAdmStatus enabled + when: check_smbbehavior|changed + +- name: Activating default SAMBA behaviour + shell: /sbin/e-smith/signal-event nethserver-samba-save + when: check_smbbehavior|changed + - name: "Create directory structure for templates-custom" file: path: "/etc/e-smith/templates-custom/etc/samba/smb.conf" @@ -18,7 +32,7 @@ group: root mode: 0755 state: directory - when: check_tempcust|changed + register: check_tempcust - name: "Copying settings from default." copy: @@ -38,41 +52,21 @@ insertafter: EOF when: check_tempcust|changed -#- name: Adding server signing as mandatory -# lineinfile: -# dest: /etc/e-smith/templates-custom/etc/samba/smb.conf/10global -# line: "server signing = mandatory" -# insertafter: "^workgroup = " -# state: present -# when: check_tempcust|changed +- name: Adding server signing as mandatory + lineinfile: + dest: /etc/e-smith/templates-custom/etc/samba/smb.conf/10global + line: "server signing = mandatory" + state: present + insertafter: EOF + when: check_tempcust|changed -#- name: Checking SMB configuration -# shell: /sbin/e-smith/db configuration printprop smb RoamingProfiles -# register: chk_smb -# changed_when: "'RoamingProfiles=yes' not in chk_smb.stdout" -# ignore_errors: true - -#- name: Configuring SMB -# shell: /sbin/e-smith/db configuration setprop smb RoamingProfiles yes ServerRole PDC Workgroup "{{ ansible_local.domain.domainshort }}" status enabled -# when: chk_smb|changed -# -#- name: Activating SMB -# shell: /sbin/e-smith/signal-event nethserver-samba-save -# when: chk_smb|changed +- name: Applying custom configurations to running SAMBA + shell: /sbin/e-smith/signal-event nethserver-samba-save + become: yes + when: check_tempcust|changed # ibays -#- name: Enabling SMB services restart when managing ibays -# file: -# src: reload -# dest: "{{ item }}/smb" -# state: link -# force: yes -# with_items: -# - /etc/e-smith/events/ibay-delete/services2adjust -# - /etc/e-smith/events/ibay-create/services2adjust -# - /etc/e-smith/events/ibay-modify/services2adjust - - name: Checking for shared ibay shell: /sbin/e-smith/db accounts show shared ignore_errors: true @@ -107,7 +101,7 @@ # when: force_ibay_shared|bool or chk_shared|failed - name: Configuring shared ibay - shell: /sbin/e-smith/db accounts set shared ibay AclRead "domain users@{{ ansible_local.domain.domainfull }}" AclWrite "domain users@{{ ansible_local.domain.domainfull }}" Description "Cartella condivisa" GroupAccess rw OtherAccess "" OwningGroup "domain admins@{{ ansible_local.domain.domainfull }}" SmbAuditStatus enabled SmbGuestAccessType none SmbRecycleBinStatus enabled SmbRecycleBinVersionsStatus enabled SmbShareBrowseable enabled + shell: /sbin/e-smith/db accounts set shared ibay AclRead "" AclWrite "" Description "Cartella condivisa" GroupAccess rw OtherAccess "" OwningGroup "domain users@{{ ansible_local.domain.domainfull }}" SmbAuditStatus enabled SmbGuestAccessType none SmbRecycleBinStatus enabled SmbRecycleBinVersionsStatus enabled SmbShareBrowseable enabled when: chk_shared|failed - name: Activating shared ibay @@ -119,11 +113,6 @@ # shell: /sbin/e-smith/db accounts setprop shared SmbProfileType shared # become: yes # when: force_ibay_shared|bool or chk_shared|failed -# -#- name: Saving new version of smb.conf -# shell: /sbin/e-smith/signal-event nethserver-samba-save -# become: yes -# when: check_tempcust|changed #- name: Forcing regeneration of smb.conf # shell: /sbin/e-smith/signal-event nethserver-samba-update