feat: Base rainbowsheep-cloud ansible playbooks and roles

roles/kerberos/templates/kadm5.acl.j2

@@ -0,0 +1 @@
+*/admin@{{ kerberos_realm | upper }} *

roles/kerberos/templates/kdc.conf.j2

@@ -0,0 +1,21 @@
+[kdcdefaults]
+    kdc_ports = 750,88
+
+[realms]
+    {{ kerberos_realm | upper }} = {
+        database_name = /var/lib/krb5kdc/principal
+        admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab
+        acl_file = /etc/krb5kdc/kadm5.acl
+        key_stash_file = /etc/krb5kdc/stash
+        kdc_ports = 750,88
+        max_life = 3d 0h 0m 0s
+        max_renewable_life = 7d 0h 0m 0s
+        #master_key_type = aes256-cts
+        #supported_enctypes = aes256-cts:normal aes128-cts:normal
+        default_principal_flags = +preauth
+    }
+
+[logging]
+	kdc = CONSOLE
+	kdc = FILE:/var/log/kdc.log
+	debug = true

roles/kerberos/templates/krb5.conf.j2

@@ -0,0 +1,28 @@
+[libdefaults]
+	default_realm = {{ kerberos_realm | upper }}
+	dns_lookup_realm = true
+    dns_lookup_kdc = true
+
+# The following krb5.conf variables are only for MIT Kerberos.
+	kdc_timesync = 1
+	ccache_type = 4
+	forwardable = true
+	proxiable = true
+	rdns = false
+
+    ticket_lifetime = 3d
+    renew_lifetime = 7d
+
+# The following libdefaults parameters are only for Heimdal Kerberos.
+	fcc-mit-ticketflags = true
+
+[realms]
+	{{ kerberos_realm | upper }} = {
+		kdc = kerberos.{{ kerberos_realm }}
+		admin_server = kerberos.{{ kerberos_realm }}
+		default_principal_flags = +preauth
+	}
+
+[domain_realm]
+    {{ kerberos_realm }}  = {{ kerberos_realm | upper }}
+    .{{ kerberos_realm }} = {{ kerberos_realm | upper }}