change cups authentication to use kerberos

roles/cups/server/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+
+- name: restart cups
+  service:
+    name: cups
+    state: restarted

roles/cups/server/tasks/main.yml

@@ -28,6 +28,13 @@
     owner: root
     group: "{{ ansible_wheel }}"
 
+- name: enable gssapi authentication from cups
+  lineinfile:
+    path: /etc/cups/cupsd.conf
+    regexp: "^DefaultAuthType .*"
+    line: "DefaultAuthType Negotiate"
+  notify: restart cups
+
 - name: disable cups socket service
   systemd:
     name: cups.socket