copy keytab instead of generating it

roles/ldap/server/tasks/main.yml

@@ -175,10 +175,10 @@
     state: started
     enabled: true
 
-- name: create slapd keytab
+- name: copy slapd keytab
-  import_role:
+  copy:
-    name: kerberos/keytab
+    dest: /etc/openldap/slapd.keytab
-  vars:
+    src: "{{ ansible_private }}/files/keytabs/slapd.keytab"
-    keytab: /etc/openldap/slapd.keytab
+    mode: 0640
-    principals: ["ldap/{{ inventory_hostname }}@{{ kerberos_realm }}"]
+    owner: root
     group: ldap