update

config.yml

@@ -6,14 +6,41 @@
     worker_limit: 1024  # Global variable used in the template
 
   tasks:
-    - name: Deploy sssd.conf
-      template:
-        src: templates/sssd.conf
-        dest: /etc/sssd/conf.d/sssd.conf
+    - name: Root password
+      ansible.builtin.import_tasks: tasks/rootpass.yml
+
+    - name: Create Directories
+      file:
+        path: '{{ item.directory }}'
+        state: directory
+        mode: "{{ item.mode | default('0755') }}"
         owner: root
         group: root
-        mode: '0600'
-      notify: Restart sssd  # This triggers the handler only if the file changes
+      loop:
+        - { directory: "/var/backups" }
+        - { directory: "/opt/atclab/bin" }
+        - { directory: "/var/user", mode: "1777" }
+
+    - name: Copy etc configs
+      copy:
+        src: '{{ item.src }}'
+        dest: '{{ item.dest }}'
+        owner: root
+        group: root
+        mode: "{{ item.mode | default('0644') }}"
+      loop:
+        - { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
+        - { src: templates/auto.users, dest: /etc/auto.users }
+        - { src: templates/sssd.conf, dest: /etc/sssd/conf.d/sssd.conf, mode: '0600' }
+
+#     - name: Deploy sssd.conf
+#       template:
+#         src: templates/sssd.conf
+#         dest: /etc/sssd/conf.d/sssd.conf
+#         owner: root
+#         group: root
+#         mode: '0600'
+#       notify: Restart sssd  # This triggers the handler only if the file changes
 
     - name: Deploy ldap.conf
       template:
@@ -55,26 +82,7 @@
         group: root
         mode: '0644'
 
-    - name: Root password
-      ansible.builtin.import_tasks: tasks/rootpass.yml
-
-    # - name: Disable SELinux
-    #   ansible.builtin.selinux:
-    #    state: disabled
-
-    - name: Create Directories
-      file:
-        path: '{{ item.directory }}'
-        state: directory
-        mode: "{{ item.mode | default('0755') }}"
-        owner: root
-        group: root
-      loop:
-        - { directory: "/var/backups" }
-        - { directory: "/opt/atclab/bin" }
-        - { directory: "/var/user", mode: "1777" }
-
-    - name: Copy etc configs
+    - name: Copy profile configs
       copy:
         src: etc/profile.d/
         dest: /etc/profile.d/
@@ -82,6 +90,17 @@
         group: root
         mode: '0644'
 
+    - name: Copy etc configs
+      copy:
+        src: '{{ item.src }}'
+        dest: '{{ item.dest }}'
+        owner: root
+        group: root
+        mode: '0644'
+      loop:
+        - { src: templates/users.autofs, dest: /etc/auto.master.d/users.autofs }
+        - { src: templates/auto.users, dest: /etc/auto.users }
+
     - name: Copy bin scripts
       copy:
         src: bin/