---
- name: install packages
  package:
    name: "{{ item }}"
    state: installed
  with_items:
    - krb5-server
    - krb5-server-ldap

- name: create kerberos config
  template:
    dest: /var/kerberos/krb5kdc/kdc.conf
    src: kdc.conf.j2
    mode: 0600
    owner: root
    group: "{{ ansible_wheel }}"
  notify: restart kdc

- name: enable kerberos service
  service:
    name: krb5kdc
    state: started
    enabled: true