---
- name: install packages
  package:
    name: sssd
    state: installed

- name: create sssd config
  template:
    dest: /etc/sssd/sssd.conf
    src: sssd.conf.j2
    mode: 0600
    owner: root
    group: "{{ ansible_wheel }}"
  notify: restart sssd

- name: enable sssd service
  service:
    name: sssd
    state: started
    enabled: true

- name: get current state of authselect
  shell: /usr/bin/authselect current --raw ; /bin/true
  register: result
  check_mode: false
  changed_when: false

- name: switch authselect to use sssd
  command: /usr/bin/authselect select sssd --force
  when: result.stdout.split()[0] != "sssd"