update..

roles/common/tasks/samba-remove-user.yml

@@ -0,0 +1,57 @@
+---
+
+# ---
+# - Remove unwanted users
+# ---
+
+
+- name: (samba-remove-user.yml) Check if samba user exists for removable system user
+  shell: pdbedit -w -L | awk -F":" '{ print $1 }' | grep '{{ item.name }}'
+  register: samba_remove_system_users_present
+  changed_when: "samba_remove_system_users_present.rc == 0"
+  failed_when: "samba_remove_system_users_present.rc > 1"
+  with_items: 
+    - "{{ remove_system_users }}"
+  loop_control:
+    label: '{{ item.name }}'
+  tags:
+    - samba-user
+
+
+- name: (samba-remove-user.yml) Remove (old) system users from samba
+  shell: >
+    smbpasswd -s -x {{ item.item.name }}
+  with_items: 
+    - "{{ samba_remove_system_users_present.results }}"
+  loop_control:
+    label: '{{ item.item.name }}'
+  when: 
+    - item.changed
+  tags:
+    - samba-user
+
+
+- name: (samba-remove-user.yml) Check if samba user exists for removable nis user
+  shell: pdbedit -w -L | awk -F":" '{ print $1 }' | grep '{{ item.name }}'
+  register: samba_remove_nis_users_present
+  changed_when: "samba_remove_nis_users_present.rc == 0"
+  failed_when: "samba_remove_nis_users_present.rc > 1"
+  with_items: 
+    - "{{ remove_nis_users }}"
+  loop_control:
+    label: '{{ item.name }}'
+  tags:
+    - samba-user
+
+
+- name: (samba-remove-user.yml) Remove (old) nis users from samba
+  shell: >
+    smbpasswd -s -x {{ item.item.name }}
+  with_items: 
+    - "{{ samba_remove_nis_users_present.results }}"
+  loop_control:
+    label: '{{ item.item.name }}'
+  when: 
+    - item.changed
+  tags:
+    - samba-user