chrisfu 3485046dbd ansible: temp-disable Samba password complexity for trust account write ... samba-tool user create rejected the cluster-generated trust_shared_password with "0000052D: Constraint violation - check_password_restrictions: the password does not meet the complexity criteria". The trust password is high-entropy random bytes from init_kdc.sh and may not satisfy AD's "3 of 4 character categories" rule. Wrap the create + setpassword steps in a block that: 1. reads the current `samba-tool domain passwordsettings show` state 2. flips complexity off if it was on 3. does the user write 4. always: restores complexity to its prior on/off state The restore is in an `always:` clause so a failure inside the write block does not leave the domain policy weakened. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-10 22:09:41 -07:00
..
deployments/svc-check-helm	infrastructure: restore ansible configuration and refactor samba_dns for internal zone - Restored the 'infrastructure' directory and root-level 'ansible.sh', 'ansible.cfg' scripts. - Refactored 'samba_dns' role to dynamically handle 'prole.org' and 'internal.prole.org' DNS zones. - Switched 'samba-tool' commands to use machine account authentication (-P) in 'samba_dns' and 'samba_reverse_dns'. - Updated AD DC inventory variables to use 127.0.0.1 and correct admin principal. - Added tags to 'samba_dns' tasks for better target execution. - Updated IDE project configuration for knoe-db.	2026-04-28 00:05:03 -07:00
inventory	fix(inventory): specify ssh key for zinfandel — non-default key name	2026-05-09 22:42:26 -07:00
playbooks	ansible: temp-disable Samba password complexity for trust account write	2026-05-10 22:09:41 -07:00
roles	fix(acme): replace fragile key-file regex selector with rejectattr	2026-05-06 15:57:57 -04:00
setup	infrastructure: restore ansible configuration and refactor samba_dns for internal zone - Restored the 'infrastructure' directory and root-level 'ansible.sh', 'ansible.cfg' scripts. - Refactored 'samba_dns' role to dynamically handle 'prole.org' and 'internal.prole.org' DNS zones. - Switched 'samba-tool' commands to use machine account authentication (-P) in 'samba_dns' and 'samba_reverse_dns'. - Updated AD DC inventory variables to use 127.0.0.1 and correct admin principal. - Added tags to 'samba_dns' tasks for better target execution. - Updated IDE project configuration for knoe-db.	2026-04-28 00:05:03 -07:00
ansible.cfg	infrastructure: restore ansible configuration and refactor samba_dns for internal zone - Restored the 'infrastructure' directory and root-level 'ansible.sh', 'ansible.cfg' scripts. - Refactored 'samba_dns' role to dynamically handle 'prole.org' and 'internal.prole.org' DNS zones. - Switched 'samba-tool' commands to use machine account authentication (-P) in 'samba_dns' and 'samba_reverse_dns'. - Updated AD DC inventory variables to use 127.0.0.1 and correct admin principal. - Added tags to 'samba_dns' tasks for better target execution. - Updated IDE project configuration for knoe-db.	2026-04-28 00:05:03 -07:00