ldap/server: Initial version of ldapspn helper script

ldapspn supports listing, creating and deleting Kerberos service
principals.

roles/ldap/server/tasks/main.yml

@@ -61,6 +61,14 @@
         hour: 0
         minute: 10
         user: ldap
+
+    - name: copy spn helper script
+      copy:
+        dest: /usr/local/sbin/ldapspn
+        src: ldapspn.py
+        mode: 0755
+        owner: root
+        group: "{{ ansible_wheel }}"
   when: ldap_master is defined
 
 - name: remove nss cert databases