update..

host_vars/file-ah.kanzlei-kiel.netz.yml

@@ -275,49 +275,20 @@ samba_groups:
     group_id: 122
   - name: gubitz-partner
     group_id: 123
+  - name: sysadm
+    group_id: 1050
+  - name: install
+    group_id: 1070
 
 samba_user:
-  - name: buero
-    groups:
-      - verwaltung
-      - intern
-    password: 'buero2011'
+
   - name: axel
     groups:
       - intern
       - verwaltung
       - hoffmann-elberling
     password: 'ah-kiel.2018'
-  - name: bjoern
-    groups:
-      - intern
-      - verwaltung
-      - hoffmann-elberling
-    password: 'bjoern2011'
-  - name: gubitz
-    groups:
-      - intern
-      - verwaltung
-      - gubitz-partner
-    password: '20gubitz12'
-  - name: schaar
-    groups:
-      - intern
-      - verwaltung
-      - gubitz-partner
-    password: '20schaar12'
-  - name: molkentin
-    groups:
-      - intern
-      - verwaltung
-      - gubitz-partner
-    password: 20molkentin12
-  - name: buerooben
-    groups:
-      - intern
-      - verwaltung
-      - hoffmann-elberling
-    password: 'buero2013'
+
   - name: back
     groups: []
     password: !vault |
@@ -327,34 +298,34 @@ samba_user:
           61313164643061306433643738643563303036646334376536626531383965303036386162393832
           6631333038306462610a356535633265633563633962333137326533633834636331343562633765
           3631
+
+  - name: bjoern
+    groups:
+      - intern
+      - verwaltung
+      - hoffmann-elberling
+    password: 'bjoern2011'
+
   - name: buchholz
     groups:
-      - buero
-      - intern
-      - verwaltung
+       - buero
+       - intern
+       - verwaltung
     password: '20-buch_holz-20'
-  - name: schmidt
+
+  - name: buero
+    groups:
+      - verwaltung
+      - intern
+    password: 'buero2011'
+
+  - name: buerooben
     groups:
       - intern
       - verwaltung
-      - gubitz-partner
-    password: '20-schmidt_21%'
-  - name: kiel-nb1
-    groups:
-      - buero
-      - intern
-      - verwaltung
-      - gubitz-partner
       - hoffmann-elberling
-    password: '20-note%book1-20'
-  - name: kiel-nb2
-    groups:
-      - buero
-      - intern
-      - verwaltung
-      - gubitz-partner
-      - hoffmann-elberling
-    password: '20-note%book2-20'
+    password: 'buero2013'
+
   - name: chris
     groups:
       - buero
@@ -370,6 +341,118 @@ samba_user:
           6631333038306462610a356535633265633563633962333137326533633834636331343562633765
           3631
 
+  - name: gubitz
+    groups:
+      - intern
+      - verwaltung
+      - gubitz-partner
+    password: '20gubitz12'
+
+  - name: heckert
+    groups:
+      - intern
+      - gubitz-partner
+    password: '0-heckert.22%'
+
+  - name: hh-jaenicke
+    groups: []
+    password: '20-th.jaenicke_%20'
+
+  - name: hh-kanzlei
+    groups: []
+    password: '20-HH_18-Kanzlei'
+
+  - name: hh-lucke
+    groups: []
+    password: 'Ole20Steffen_17'
+
+  - name: hh-kell
+    groups: []
+    password: '20-an.kell-%24'
+
+  - name: hh-neumann
+    groups: []
+    password: '20.neu-mann_%24'
+
+  - name: hh-pueschel
+    groups: []
+    password: '20-HH_caro.pueschel-%21'
+
+  - name: kiel-nb1
+    groups:
+      - buero
+      - intern
+      - verwaltung
+      - gubitz-partner
+      - hoffmann-elberling
+    password: '20-note%book1-20'
+
+  - name: kiel-nb2
+    groups:
+      - buero
+      - intern
+      - verwaltung
+      - gubitz-partner
+      - hoffmann-elberling
+    password: '20-note%book2-20'
+
+  - name: molkentin
+    groups:
+      - intern
+      - verwaltung
+      - gubitz-partner
+    password: 20molkentin12
+
+  - name: schaar
+    groups:
+      - intern
+      - verwaltung
+      - gubitz-partner
+    password: '20schaar12'
+
+  - name: schmidt
+    groups:
+      - intern
+      - verwaltung
+      - gubitz-partner
+    password: '20-schmidt_21%'
+
+  - name: simone.schnoenmehl
+    groups:
+      - intern
+      - gubitz-partner
+    password: '20-simone-schnoenmehl-22%'
+
+  # password: 9xFXkdPR_2
+  - name: sysadm
+    groups:
+      - buero
+      - install
+      - intern
+      - verwaltung
+      - gubitz-partner
+      - hoffmann-elberling
+    password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          35323634653231353634343232326436393435386366396364373766306135636536323165656362
+          3138366263316231333038343930313134333565373566640a363932616535343538376333313335
+          64326566643163366533356464326339653236636562363336633738656631626433306661323835
+          3337663865333636660a626131366161636433613561613235333831653733383365623564313431
+          6439
+
+  # password: Iar-zrq4wG.2
+  - name: winadm
+    groups:
+      - sysadm
+      - install
+    password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          31326630303038396164656266623339353031336434376531383133643266656133363165316532
+          6364343131656235313432356230646337373362343938660a393031323561326438653935393632
+          34373464313666343433626635656261323933353631393632626166643738386333636639303334
+          3661613165626230640a306236363161356239306232633565336131303066383464626164636133
+          3038
+
 base_home: /home
 
 # remove_samba_users:
@@ -434,6 +517,15 @@ samba_shares:
     vfs_object_recycle: true
     recycle_path: '@Recycle'
 
+  - name: Install
+    path: /data/samba/shares/install
+    group_valid_users: install
+    group_write_list: install
+    file_create_mask: !!str 660
+    dir_create_mask: !!str 2770
+    vfs_object_recycle: true
+    recycle_path: '@Recycle'
+
     # ---
     # - This share will be written by Windows Server 2016 configured at
     # - "Windows Zubehör" -> "Windows Server-Sicherung"
@@ -441,8 +533,8 @@ samba_shares:
   - name: WinServer2016-Backup
     comment: WinServer2016-Backup on Fileserver
     path: /data/samba/shares/WinServer2016-Backup
-    group_valid_users: {}
-    group_write_list: {}
+    group_valid_users: sysadm
+    group_write_list: sysadm
     file_create_mask: !!str 664
     dir_create_mask: !!str 2775
     guest_ok: !!str yes