- hosts: eenfachdj
  remote_user: localadm
  become: yes
  tasks:
    # items2dict(key='mount', value='device')
    - name: "getting rootfs device"
      shell: "/usr/sbin/zfs list -H -o name | egrep \"ROOT$\""
      register: rootfs_device
    - debug:
        msg: "the root-device is: {{rootfs_device.stdout}}"
    - name: "create /opt/ds dataset"
      zfs:
        name: "{{ rootfs_device.stdout }}/opt/ds"
        state: present
        extra_zfs_properties:
          mountpoint: /opt/ds
    - name: "install gnu-tar"
      pkg5:
        name: pkg:/archiver/gnu-tar
        state: present
    - name: "create dsadm group"
      group:
        name: dsadm
        gid: 1636
        state: present
    - name: "create dsadm user"
      user:
        name: dsadm
        uid: 1636
        group: 1636
        comment: "Directory Server Admin"
        home: /opt/ds
        shell: /bin/ksh
        state: present
    - file:
        dest: /opt/ds/.ssh
        state: directory
        owner: dsadm
        group: dsadm
        mode: 700
    - file:
        dest: "{{ item }}"
        state: directory
        owner: dsadm
        group: dsadm
        mode: 755
      loop:
        - /opt/ds
        - /opt/ds/install
        - /opt/ds/etc
        - /opt/ds/etc/ssl
        - /opt/ds/jks
        - /opt/ds/jdk
        - /opt/ds/monitoring
        - /opt/ds/bin
    - name: "copy ssh key to dsadm"
      copy:
        src: /export/home/olbohlen/.ssh/id_rsa.pub
        dest: /opt/ds/.ssh/authorized_keys
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy .profile"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/dot_profile
        dest: /opt/ds/.profile
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy JDK8..."
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/install/jdk-8u191-solaris-sparcv9.tar.gz
        dest: /opt/ds/install/jdk-8u191-solaris-sparcv9.tar.gz
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy OpenDJ"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/install/opendj-4.2.5.zip
        dest: /opt/ds/install/opendj-4.2.5.zip
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config
        dest: /opt/ds/config/config
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/00_myskel.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/00_myskel.ldif
        dest: /opt/ds/config/00_myskel.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/02_enable-replication.ksh"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/02_enable-replication.ksh
        dest: /opt/ds/config/02_enable-replication.ksh
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/03_init-replication.ksh"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/03_init-replication.ksh
        dest: /opt/ds/config/03_init-replication.ksh
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/04_enable_pre-enc_passwords.sh"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/04_enable_pre-enc_passwords.sh
        dest: /opt/ds/config/04_enable_pre-enc_passwords.sh
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/05_mygroups.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/05_mygroups.ldif
        dest: /opt/ds/config/05_mygroups.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/06_mypeople.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/06_mypeople.ldif
        dest: /opt/ds/config/06_mypeople.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/07_hosts.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/07_hosts.ldif
        dest: /opt/ds/config/07_hosts.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/08_myproxy.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/08_myproxy.ldif
        dest: /opt/ds/config/08_myproxy.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/09_netgroup.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/09_netgroup.ldif
        dest: /opt/ds/config/09_netgroup.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/10_addaci.ksh"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/10_addaci.ksh
        dest: /opt/ds/config/10_addaci.ksh
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/12_automount.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/12_automount.ldif
        dest: /opt/ds/config/12_automount.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/13_authattr.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/13_authattr.ldif
        dest: /opt/ds/config/13_authattr.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/14_profattr.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/14_profattr.ldif
        dest: /opt/ds/config/14_profattr.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/15_user_attr.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/15_user_attr.ldif
        dest: /opt/ds/config/15_user_attr.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/16_primadmin_prof.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/16_primadmin_prof.ldif
        dest: /opt/ds/config/16_primadmin_prof.ldif
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/ds-man.pass"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/ds-man.pass
        dest: /opt/ds/config/ds-man.pass
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/eenfach.de-dump3.ldif"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/config/eenfach.de-dump3.ldif
        dest: /opt/ds/config/eenfach.de-dump3.ldif
        mode: 644
        owner: dsadm
        group: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/jks/keystore.jks"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/jks/keystore.jks
        dest: /opt/ds/jks/keystore.jks
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/jks/keystore.pin"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/jks/keystore.pin
        dest: /opt/ds/jks/keystore.pin
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy service manifest"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/opendj.xml
        dest: /opt/ds/opendj.xml
        mode: 644
        owner: dsadm
        group: dsadm
    - name: "copy service method"
      copy:
        src: /export/home/olbohlen/git/ansible-playbooks/toy/files/ds/opends/svc-opendj
        dest: /lib/svc/method/svc-opendj
        mode: 555
        owner: root
        group: bin 
    - name: "extract JDK8..."
      unarchive:
        src: /opt/ds/install/jdk-8u191-solaris-sparcv9.tar.gz
        dest: /opt/ds/jdk
        remote_src: yes
        owner: dsadm
        group: dsadm
    - name: "creating jdk/latest symlink..."
      file:
        src: /opt/ds/jdk/jdk1.8.0_191
        dest: /opt/ds/jdk/latest
        owner: dsadm
        group: dsadm
        state: link
    - name: "unzip OpenDJ install archive"
      unarchive:
        src: /opt/ds/install/opendj-4.2.5.zip
        dest: /opt/ds
        remote_src: yes
        owner: dsadm
        group: dsadm
    # - name: Generate a Self Signed OpenSSL certificate
    #   openssl_certificate:
    #     path: /opt/ds/etc/ssl/dj-eenfach.crt
    #     privatekey_path: /opt/ds/etc/ssl/dj-eenfach.key
    #     csr_path: /opt/ds/etc/ssl/dj-eenfach.csr
    #     provider: selfsigned
    #     valid_in: 31536000
    #     subject_alt_name:
    #       - opendj.eenfach.de
    #       - "{{ inventory_hostname_short }}.eenfach.de"
    # - name: "import cert and key into keystore..."
    #   java_keystore:
    #     name: eenfachdj
    #     certificate: "{{lookup('file', '/opt/ds/etc/ssl/dj-eenfach.crt') }}"
    #     private_key: "{{lookup('file', '/opt/ds/etc/ssl/dj-eenfach.key') }}"
    #     password: '2)Pxqd*V>V/='
    #     dest: /opt/ds/jks/keystore.jks
    - name: "copy keystore..."
      copy:
        src: "files/ds/opends/etc/certs/keystore-{{ inventory_hostname_short }}.eenfach.de.jks"
        dest: /opt/ds/jks/keystore.jks
        mode: 600
        owner: dsadm
        group: dsadm
    - name: "creating pinfile..."
      copy:
        content: '123456'
        dest: /opt/ds/jks/keystore.pin
        mode: 600
        owner: dsadm
        group: dsadm
    - name: "installing OpenDJ..."
      shell: "./setup -n -i --acceptLicense --baseDN dc=eenfach,dc=de --useJavaKeystore /opt/ds/jks/keystore.jks --keyStorePasswordFile /opt/ds/jks/keystore.pin --cli -j /opt/ds/config/ds-man.pass -q"
      register: rootfs_device
      remote_user: dsadm
      become: no
      args:
        creates: /opt/ds/opendj/config
        chdir: /opt/ds/opendj