---
- name: Install packages
  ansible.builtin.package:
    name: "{{ item }}"
    state: installed
  with_items:
    - cyrus-sasl
    - cyrus-sasl-plain

- name: Set saslauthd to use LDAP
  ansible.builtin.lineinfile:
    path: /etc/sysconfig/saslauthd
    line: MECH=ldap
    regexp: "^MECH=.*"
  notify: Restart saslauthd
  when: saslauthd_mech == "ldap"

- name: Create saslauthd.conf
  ansible.builtin.template:
    dest: /etc/saslauthd.conf
    src: saslauthd.conf.j2
    mode: "0640"
    owner: root
    group: "{{ ansible_wheel }}"
  notify: Restart saslauthd
  when: saslauthd_mech == "ldap"

- name: Enable saslauthd service
  ansible.builtin.service:
    name: saslauthd
    state: started
    enabled: true