update..

ansible-dependencies-trixie.yml

@@ -1,15 +1,7 @@
 ---
 
-- hosts: initial_setup
+- hosts: all
-  remote_user: root
-  become: false
   gather_facts: false
 
-  vars_prompt:
-
-    - name: ansible_ssh_pass
-      prompt: "Give root's password here"
-
   roles:
      - ansible_dependencies-trixie
-     - ansible_user_debian

files/akb.netz/homedirs/DEFAULT/_profile

@@ -1,36 +0,0 @@
-# ~/.profile: executed by the command interpreter for login shells.
-# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
-# exists.
-# see /usr/share/doc/bash/examples/startup-files for examples.
-# the files are located in the bash-doc package.
-
-# the default umask is set in /etc/profile; for setting the umask
-# for ssh logins, install and configure the libpam-umask package.
-#umask 022
-
-# if running bash
-if [ -n "$BASH_VERSION" ]; then
-    # include .bashrc if it exists
-    if [ -f "$HOME/.bashrc" ]; then
-	. "$HOME/.bashrc"
-    fi
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/bin" ] ; then
-    PATH="$HOME/bin:$PATH"
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/.local/bin" ] ; then
-    PATH="$HOME/.local/bin:$PATH"
-fi
-
-# this is for the midnight-commander
-# to become the last directory the midnight commander was in
-# as the current directory when leaving the midnight commander
-#
-if [[ -f /usr/share/mc/bin/mc.sh ]]; then
-   source /usr/share/mc/bin/mc.sh
-fi
-

files/akb.netz/homedirs/DEFAULT/_profile.j2

@@ -48,9 +48,12 @@ export LANG="de_DE.utf8"
 # 
 [[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
 
+# Don't try to mount samba shares if local mount base directory does not exist
+[[ -d "/mnt/{{ user.name }}" ]] || return
+
 SERVER="{{ samba_server }}"
-USER="{{ item.item.name }}"
+USER="{{ user.name }}"
-PASSWORD='{{ item.item.password }}'
+PASSWORD='{{ user.password }}'
 #VERSION="1.0"
 
 # Use NTLMv2 password hashing and force packet signing

files/akb.netz/homedirs/DEFAULT/_profile.j2.00

@@ -0,0 +1,133 @@
+# {{ ansible_managed }}
+
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+# see /usr/share/doc/bash/examples/startup-files for examples.
+# the files are located in the bash-doc package.
+
+# the default umask is set in /etc/profile; for setting the umask
+# for ssh logins, install and configure the libpam-umask package.
+#umask 022
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+   . "$HOME/.bashrc"
+    fi
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi
+
+# this is for the midnight-commander
+# to become the last directory the midnight commander was in
+# as the current directory when leaving the midnight commander
+#
+if [ -f "/usr/share/mc/bin/mc.sh" ]; then
+   source /usr/share/mc/bin/mc.sh
+elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
+   source /usr/lib/mc/bin/mc.sh
+fi
+
+export LANG="de_DE.utf8"
+
+# ---
+# Mmount samba shares
+# ---
+
+# Don't try to mount samba shares if login at samba server
+# 
+[[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
+
+SERVER="{{ samba_server }}"
+USER="{{ item.item.name }}"
+PASSWORD='{{ item.item.password }}'
+#VERSION="1.0"
+
+# Use NTLMv2 password hashing and force packet signing
+#
+#    SEC="ntlmv2i"
+#
+# Use NTLMv2 password hashing encapsulated in Raw NTLMSSP message, and force packet signing
+#
+#    SEC="ntlmsspi"
+#
+SEC="ntlmsspi"
+
+# - uid/guid of the user at fielserver
+# -
+_UID="$(id -u)"
+_GID="$(id -g)"
+
+
+# Logfile to see what happened..
+#
+_logfile=/tmp/profile_${USER}.log
+
+
+echo "" > $_logfile
+echo "$(date +"%Y-%m-%d-%H%M")" >> $_logfile
+
+# Network present
+#
+_network=false
+
+if [  "X$_addr" = "X" ] ; then
+   echo "no inet address assigned yet.." >> $_logfile
+   declare -i count=1
+   while  ! $_network && [[ $count -lt 5 ]] ; do
+      echo "sleeping 2 seconds.." >> $_logfile
+      sleep 2
+      _addr="$(hostname --ip-address)"
+      if [ "X$_addr" != "X" ] ; then
+         _network=true
+         echo "inet address present: $_addr" >> $_logfile
+      fi
+      ((count++))
+   done
+fi
+
+for dir in $(ls /mnt/$USER) ; do
+   MOUNT_POINT=/mnt/$USER/$dir
+   SHARE=$dir
+
+   [ ! -d $MOUNT_POINT ] && continue
+
+   if ! mount | grep $MOUNT_POINT > /dev/null ; then
+      echo "Going to mount share '${SHARE}' .." >> $_logfile
+      if [ -x /usr/bin/smb4k_mount ]; then
+         ## - Ubuntu <= 12.04
+         if [[ "$VERSION" = "1.0" ]]; then
+            sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,vers=1.0 \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         else
+            #sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID,vers=$VERSION \
+            sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         fi
+      else
+         ## - Ubuntu Version >= 14.04
+         if [[ "$VERSION" = "1.0" ]]; then
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,vers=1.0 \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         else
+            #sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,uid=$USER,sec=${SEC},vers=$VERSION \
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$USER,gid=$_GID \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         fi
+      fi
+   else
+      echo "mount point $MOUNT_POINT already exists. nothing left to do.." >> $_logfile
+   fi
+
+done
+

files/anw-kb.netz/homedirs/DEFAULT/_profile

@@ -1,32 +0,0 @@
-# ~/.profile: executed by the command interpreter for login shells.
-# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
-# exists.
-# see /usr/share/doc/bash/examples/startup-files for examples.
-# the files are located in the bash-doc package.
-
-# the default umask is set in /etc/profile; for setting the umask
-# for ssh logins, install and configure the libpam-umask package.
-#umask 022
-
-# if running bash
-if [ -n "$BASH_VERSION" ]; then
-    # include .bashrc if it exists
-    if [ -f "$HOME/.bashrc" ]; then
-	. "$HOME/.bashrc"
-    fi
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/bin" ] ; then
-    PATH="$HOME/bin:$PATH"
-fi
-
-# this is for the midnight-commander
-# to become the last directory the midnight commander was in
-# as the current directory when leaving the midnight commander
-#
-if [ -f "/usr/share/mc/bin/mc.sh" ]; then
-   source /usr/share/mc/bin/mc.sh
-elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
-   source /usr/lib/mc/bin/mc.sh
-fi

files/anw-kb.netz/homedirs/DEFAULT/_profile.j2

@@ -48,9 +48,12 @@ export LANG="de_DE.utf8"
 # 
 [[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
 
+# Don't try to mount samba shares if local mount base directory does not exist
+[[ -d "/mnt/{{ user.name }}" ]] || return
+
 SERVER="{{ samba_server }}"
-USER="{{ item.item.name }}"
+USER="{{ user.name }}"
-PASSWORD='{{ item.item.password }}'
+PASSWORD='{{ user.password }}'
 #VERSION="1.0"
 
 # Use NTLMv2 password hashing and force packet signing

files/flr.netz/homedirs/DEFAULT/_profile

@@ -1,36 +0,0 @@
-# ~/.profile: executed by the command interpreter for login shells.
-# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
-# exists.
-# see /usr/share/doc/bash/examples/startup-files for examples.
-# the files are located in the bash-doc package.
-
-# the default umask is set in /etc/profile; for setting the umask
-# for ssh logins, install and configure the libpam-umask package.
-#umask 022
-
-# if running bash
-if [ -n "$BASH_VERSION" ]; then
-    # include .bashrc if it exists
-    if [ -f "$HOME/.bashrc" ]; then
-	. "$HOME/.bashrc"
-    fi
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/bin" ] ; then
-    PATH="$HOME/bin:$PATH"
-fi
-
-# this is for the midnight-commander
-# to become the last directory the midnight commander was in
-# as the current directory when leaving the midnight commander
-#
-if [ -f "/usr/share/mc/bin/mc.sh" ]; then
-   source /usr/share/mc/bin/mc.sh
-elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
-   source /usr/lib/mc/bin/mc.sh
-fi
-
-if command -v mesg >/dev/null 2>&1; then
-    mesg n
-fi

files/flr.netz/homedirs/DEFAULT/_profile.j2

@@ -45,12 +45,14 @@ export LANG="de_DE.utf8"
 # ---
 
 # Don't try to mount samba shares if login at samba server
-# 
 [[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
 
+# Don't try to mount samba shares if local mount base directory does not exist
+[[ -d "/mnt/{{ user.name }}" ]] || return
+
 SERVER="{{ samba_server }}"
-USER="{{ item.item.name }}"
+USER="{{ user.name }}"
-PASSWORD='{{ item.item.password }}'
+PASSWORD='{{ user.password }}'
 #VERSION="1.0"
 
 # Use NTLMv2 password hashing and force packet signing

files/flr.netz/homedirs/DEFAULT/_profile.j2.00

@@ -0,0 +1,133 @@
+# {{ ansible_managed }}
+
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+# see /usr/share/doc/bash/examples/startup-files for examples.
+# the files are located in the bash-doc package.
+
+# the default umask is set in /etc/profile; for setting the umask
+# for ssh logins, install and configure the libpam-umask package.
+#umask 022
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+   . "$HOME/.bashrc"
+    fi
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi
+
+# this is for the midnight-commander
+# to become the last directory the midnight commander was in
+# as the current directory when leaving the midnight commander
+#
+if [ -f "/usr/share/mc/bin/mc.sh" ]; then
+   source /usr/share/mc/bin/mc.sh
+elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
+   source /usr/lib/mc/bin/mc.sh
+fi
+
+export LANG="de_DE.utf8"
+
+# ---
+# Mmount samba shares
+# ---
+
+# Don't try to mount samba shares if login at samba server
+# 
+[[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
+
+SERVER="{{ samba_server }}"
+USER="{{ item.item.name }}"
+PASSWORD='{{ item.item.password }}'
+#VERSION="1.0"
+
+# Use NTLMv2 password hashing and force packet signing
+#
+#    SEC="ntlmv2i"
+#
+# Use NTLMv2 password hashing encapsulated in Raw NTLMSSP message, and force packet signing
+#
+#    SEC="ntlmsspi"
+#
+SEC="ntlmsspi"
+
+# - uid/guid of the user at fielserver
+# -
+_UID="$(id -u)"
+_GID="$(id -g)"
+
+
+# Logfile to see what happened..
+#
+_logfile=/tmp/profile_${USER}.log
+
+
+echo "" > $_logfile
+echo "$(date +"%Y-%m-%d-%H%M")" >> $_logfile
+
+# Network present
+#
+_network=false
+
+if [  "X$_addr" = "X" ] ; then
+   echo "no inet address assigned yet.." >> $_logfile
+   declare -i count=1
+   while  ! $_network && [[ $count -lt 5 ]] ; do
+      echo "sleeping 2 seconds.." >> $_logfile
+      sleep 2
+      _addr="$(hostname --ip-address)"
+      if [ "X$_addr" != "X" ] ; then
+         _network=true
+         echo "inet address present: $_addr" >> $_logfile
+      fi
+      ((count++))
+   done
+fi
+
+for dir in $(ls /mnt/$USER) ; do
+   MOUNT_POINT=/mnt/$USER/$dir
+   SHARE=$dir
+
+   [ ! -d $MOUNT_POINT ] && continue
+
+   if ! mount | grep $MOUNT_POINT > /dev/null ; then
+      echo "Going to mount share '${SHARE}' .." >> $_logfile
+      if [ -x /usr/bin/smb4k_mount ]; then
+         ## - Ubuntu <= 12.04
+         if [[ "$VERSION" = "1.0" ]]; then
+            sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,vers=1.0 \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         else
+            #sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID,vers=$VERSION \
+            sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         fi
+      else
+         ## - Ubuntu Version >= 14.04
+         if [[ "$VERSION" = "1.0" ]]; then
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,vers=1.0 \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         else
+            #sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,uid=$USER,sec=${SEC},vers=$VERSION \
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$USER,gid=$_GID \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         fi
+      fi
+   else
+      echo "mount point $MOUNT_POINT already exists. nothing left to do.." >> $_logfile
+   fi
+
+done
+

files/mbr-bln.netz/homedirs/DEFAULT/_profile

@@ -1,38 +0,0 @@
-# ~/.profile: executed by the command interpreter for login shells.
-# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
-# exists.
-# see /usr/share/doc/bash/examples/startup-files for examples.
-# the files are located in the bash-doc package.
-
-# the default umask is set in /etc/profile; for setting the umask
-# for ssh logins, install and configure the libpam-umask package.
-#umask 022
-
-# if running bash
-if [ -n "$BASH_VERSION" ]; then
-    # include .bashrc if it exists
-    if [ -f "$HOME/.bashrc" ]; then
-	. "$HOME/.bashrc"
-    fi
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/bin" ] ; then
-    PATH="$HOME/bin:$PATH"
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/.local/bin" ] ; then
-    PATH="$HOME/.local/bin:$PATH"
-fi
-
-# this is for the midnight-commander
-# to become the last directory the midnight commander was in
-# as the current directory when leaving the midnight commander
-#
-if [ -f "/usr/share/mc/bin/mc.sh" ]; then
-   source /usr/share/mc/bin/mc.sh
-elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
-   source /usr/lib/mc/bin/mc.sh
-fi
-

files/mbr-bln.netz/homedirs/DEFAULT/_profile.j2

@@ -51,11 +51,11 @@ export LANG="de_DE.utf8"
 
 # Only try mounting samba shares, if local mount base directory exists.
 #
-if [[ -d "/mnt/{{ item.item.name }}" ]]; then
+if [[ -d "/mnt/{{ user.name }}" ]]; then
 
    SERVER="{{ samba_server }}"
-   USER="{{ item.item.name }}"
+   USER="{{ user.name }}"
-   PASSWORD='{{ item.item.password }}'
+   PASSWORD='{{ user.password }}'
    #VERSION="1.0"
 
    # Use NTLMv2 password hashing and force packet signing

files/mbr-bln.netz/homedirs/DEFAULT/_profile.j2.00

@@ -0,0 +1,140 @@
+# {{ ansible_managed }}
+
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+# see /usr/share/doc/bash/examples/startup-files for examples.
+# the files are located in the bash-doc package.
+
+# the default umask is set in /etc/profile; for setting the umask
+# for ssh logins, install and configure the libpam-umask package.
+#umask 022
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+   . "$HOME/.bashrc"
+    fi
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi
+
+# this is for the midnight-commander
+# to become the last directory the midnight commander was in
+# as the current directory when leaving the midnight commander
+#
+if [ -f "/usr/share/mc/bin/mc.sh" ]; then
+   source /usr/share/mc/bin/mc.sh
+elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
+   source /usr/lib/mc/bin/mc.sh
+fi
+
+export LANG="de_DE.utf8"
+
+# ---
+# Mmount samba shares
+# ---
+
+# Don't try to mount samba shares if login at samba server
+#
+[[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
+
+
+# Only try mounting samba shares, if local mount base directory exists.
+#
+if [[ -d "/mnt/{{ item.item.name }}" ]]; then
+
+   SERVER="{{ samba_server }}"
+   USER="{{ item.item.name }}"
+   PASSWORD='{{ item.item.password }}'
+   #VERSION="1.0"
+
+   # Use NTLMv2 password hashing and force packet signing
+   #
+   #    SEC="ntlmv2i"
+   #
+   # Use NTLMv2 password hashing encapsulated in Raw NTLMSSP message, and force packet signing
+   #
+   #    SEC="ntlmsspi"
+   #
+   SEC="ntlmsspi"
+
+   # - uid/guid of the user at fielserver
+   # -
+   _UID="$(id -u)"
+   _GID="$(id -g)"
+
+
+   # Logfile to see what happened..
+   #
+   _logfile=/tmp/profile_${USER}.log
+
+
+   echo "" > $_logfile
+   echo "$(date +"%Y-%m-%d-%H%M")" >> $_logfile
+
+   # Network present
+   #
+   _network=false
+
+   if [  "X$_addr" = "X" ] ; then
+      echo "no inet address assigned yet.." >> $_logfile
+      declare -i count=1
+      while  ! $_network && [[ $count -lt 5 ]] ; do
+         echo "sleeping 2 seconds.." >> $_logfile
+         sleep 2
+         _addr="$(hostname --ip-address)"
+         if [ "X$_addr" != "X" ] ; then
+            _network=true
+            echo "inet address present: $_addr" >> $_logfile
+         fi
+         ((count++))
+      done
+   fi
+
+   for dir in $(ls /mnt/$USER) ; do
+      MOUNT_POINT=/mnt/$USER/$dir
+      SHARE=$dir
+
+      [ ! -d $MOUNT_POINT ] && continue
+
+      if ! mount | grep $MOUNT_POINT > /dev/null ; then
+         echo "Going to mount share '${SHARE}' .." >> $_logfile
+         if [ -x /usr/bin/smb4k_mount ]; then
+            ## - Ubuntu <= 12.04
+            if [[ "$VERSION" = "1.0" ]]; then
+               sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,vers=1.0 \
+                  -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+            else
+               #sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID,vers=$VERSION \
+               sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID \
+                  -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+            fi
+         else
+            ## - Ubuntu Version >= 14.04
+            if [[ "$VERSION" = "1.0" ]]; then
+               sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,vers=1.0 \
+                  -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+            else
+               #sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,uid=$USER,sec=${SEC},vers=$VERSION \
+               sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$USER,gid=$_GID \
+                  -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+            fi
+         fi
+      else
+         echo "mount point $MOUNT_POINT already exists. nothing left to do.." >> $_logfile
+      fi
+
+   done
+
+fi
+

files/sprachenatelier.netz/homedirs/DEFAULT/_profile

@@ -1,37 +0,0 @@
-# ~/.profile: executed by the command interpreter for login shells.
-# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
-# exists.
-# see /usr/share/doc/bash/examples/startup-files for examples.
-# the files are located in the bash-doc package.
-
-# the default umask is set in /etc/profile; for setting the umask
-# for ssh logins, install and configure the libpam-umask package.
-#umask 022
-
-# if running bash
-if [ -n "$BASH_VERSION" ]; then
-    # include .bashrc if it exists
-    if [ -f "$HOME/.bashrc" ]; then
-	. "$HOME/.bashrc"
-    fi
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/bin" ] ; then
-    PATH="$HOME/bin:$PATH"
-fi
-
-# set PATH so it includes user's private bin if it exists
-if [ -d "$HOME/.local/bin" ] ; then
-    PATH="$HOME/.local/bin:$PATH"
-fi
-
-# this is for the midnight-commander
-# to become the last directory the midnight commander was in
-# as the current directory when leaving the midnight commander
-#
-if [ -f "/usr/share/mc/bin/mc.sh" ]; then
-   source /usr/share/mc/bin/mc.sh
-elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
-   source /usr/lib/mc/bin/mc.sh
-fi

files/sprachenatelier.netz/homedirs/DEFAULT/_profile.j2

@@ -14,7 +14,7 @@
 if [ -n "$BASH_VERSION" ]; then
     # include .bashrc if it exists
     if [ -f "$HOME/.bashrc" ]; then
-   . "$HOME/.bashrc"
+        . "$HOME/.bashrc"
     fi
 fi
 
@@ -31,7 +31,6 @@ fi
 # this is for the midnight-commander
 # to become the last directory the midnight commander was in
 # as the current directory when leaving the midnight commander
-#
 if [ -f "/usr/share/mc/bin/mc.sh" ]; then
    source /usr/share/mc/bin/mc.sh
 elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
@@ -41,52 +40,35 @@ fi
 export LANG="de_DE.utf8"
 
 # ---
-# Mmount samba shares
+# Mount samba shares
 # ---
 
 # Don't try to mount samba shares if login at samba server
-# 
 [[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
 
-
 # Don't try to mount samba shares if local mount base directory does not exist
-#
+[[ -d "/mnt/{{ user.name }}" ]] || return
-[[ -d "/mnt/{{ item.item.name }}" ]] || return
-
 
 SERVER="{{ samba_server }}"
-USER="{{ item.item.name }}"
+USER="{{ user.name }}"
-PASSWORD='{{ item.item.password }}'
+PASSWORD='{{ user.password }}'
 #VERSION="1.0"
 
-# Use NTLMv2 password hashing and force packet signing
-#
-#    SEC="ntlmv2i"
-#
 # Use NTLMv2 password hashing encapsulated in Raw NTLMSSP message, and force packet signing
-#
-#    SEC="ntlmsspi"
-#
 SEC="ntlmsspi"
 
-# - uid/guid of the user at fielserver
+# - uid/gid of the user at fileserver
-# -
 _UID="$(id -u)"
 _GID="$(id -g)"
 
-
 # Logfile to see what happened..
-#
 _logfile=/tmp/profile_${USER}.log
 
-
 echo "" > $_logfile
 echo "$(date +"%Y-%m-%d-%H%M")" >> $_logfile
 
 # Network present
-#
 _network=false
-
 if [  "X$_addr" = "X" ] ; then
    echo "no inet address assigned yet.." >> $_logfile
    declare -i count=1
@@ -106,9 +88,9 @@ for dir in $(ls /mnt/$USER) ; do
    MOUNT_POINT=/mnt/$USER/$dir
    SHARE=$dir
 
-   [ ! -d $MOUNT_POINT ] && continue
+   [ ! -d "$MOUNT_POINT" ] && continue
 
-   if ! mount | grep $MOUNT_POINT > /dev/null ; then
+   if ! mount | grep "$MOUNT_POINT" > /dev/null ; then
       echo "Going to mount share '${SHARE}' .." >> $_logfile
       if [ -x /usr/bin/smb4k_mount ]; then
          ## - Ubuntu <= 12.04
@@ -116,7 +98,6 @@ for dir in $(ls /mnt/$USER) ; do
             sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,vers=1.0 \
                -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
          else
-            #sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID,vers=$VERSION \
             sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID \
                -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
          fi
@@ -126,14 +107,12 @@ for dir in $(ls /mnt/$USER) ; do
             sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,vers=1.0 \
                -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
          else
-            #sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,uid=$USER,sec=${SEC},vers=$VERSION \
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,uid=$USER,gid=$_GID \
-            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$USER,gid=$_GID \
                -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
          fi
       fi
    else
       echo "mount point $MOUNT_POINT already exists. nothing left to do.." >> $_logfile
    fi
-
 done
 

files/sprachenatelier.netz/homedirs/DEFAULT/_profile.j2.00

@@ -0,0 +1,139 @@
+# {{ ansible_managed }}
+
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+# see /usr/share/doc/bash/examples/startup-files for examples.
+# the files are located in the bash-doc package.
+
+# the default umask is set in /etc/profile; for setting the umask
+# for ssh logins, install and configure the libpam-umask package.
+#umask 022
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+    # include .bashrc if it exists
+    if [ -f "$HOME/.bashrc" ]; then
+   . "$HOME/.bashrc"
+    fi
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/bin" ] ; then
+    PATH="$HOME/bin:$PATH"
+fi
+
+# set PATH so it includes user's private bin if it exists
+if [ -d "$HOME/.local/bin" ] ; then
+    PATH="$HOME/.local/bin:$PATH"
+fi
+
+# this is for the midnight-commander
+# to become the last directory the midnight commander was in
+# as the current directory when leaving the midnight commander
+#
+if [ -f "/usr/share/mc/bin/mc.sh" ]; then
+   source /usr/share/mc/bin/mc.sh
+elif [ -f "/usr/lib/mc/bin/mc.sh" ] ; then
+   source /usr/lib/mc/bin/mc.sh
+fi
+
+export LANG="de_DE.utf8"
+
+# ---
+# Mmount samba shares
+# ---
+
+# Don't try to mount samba shares if login at samba server
+# 
+[[ "$(hostname --long)" = "{{ samba_server }}" ]] && return
+
+
+# Don't try to mount samba shares if local mount base directory does not exist
+#
+[[ -d "/mnt/{{ item.item.name }}" ]] || return
+
+
+SERVER="{{ samba_server }}"
+USER="{{ item.item.name }}"
+PASSWORD='{{ item.item.password }}'
+#VERSION="1.0"
+
+# Use NTLMv2 password hashing and force packet signing
+#
+#    SEC="ntlmv2i"
+#
+# Use NTLMv2 password hashing encapsulated in Raw NTLMSSP message, and force packet signing
+#
+#    SEC="ntlmsspi"
+#
+SEC="ntlmsspi"
+
+# - uid/guid of the user at fielserver
+# -
+_UID="$(id -u)"
+_GID="$(id -g)"
+
+
+# Logfile to see what happened..
+#
+_logfile=/tmp/profile_${USER}.log
+
+
+echo "" > $_logfile
+echo "$(date +"%Y-%m-%d-%H%M")" >> $_logfile
+
+# Network present
+#
+_network=false
+
+if [  "X$_addr" = "X" ] ; then
+   echo "no inet address assigned yet.." >> $_logfile
+   declare -i count=1
+   while  ! $_network && [[ $count -lt 5 ]] ; do
+      echo "sleeping 2 seconds.." >> $_logfile
+      sleep 2
+      _addr="$(hostname --ip-address)"
+      if [ "X$_addr" != "X" ] ; then
+         _network=true
+         echo "inet address present: $_addr" >> $_logfile
+      fi
+      ((count++))
+   done
+fi
+
+for dir in $(ls /mnt/$USER) ; do
+   MOUNT_POINT=/mnt/$USER/$dir
+   SHARE=$dir
+
+   [ ! -d $MOUNT_POINT ] && continue
+
+   if ! mount | grep $MOUNT_POINT > /dev/null ; then
+      echo "Going to mount share '${SHARE}' .." >> $_logfile
+      if [ -x /usr/bin/smb4k_mount ]; then
+         ## - Ubuntu <= 12.04
+         if [[ "$VERSION" = "1.0" ]]; then
+            sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,vers=1.0 \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         else
+            #sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID,vers=$VERSION \
+            sudo /usr/bin/smb4k_mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$_UID,gid=$_GID \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         fi
+      else
+         ## - Ubuntu Version >= 14.04
+         if [[ "$VERSION" = "1.0" ]]; then
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,vers=1.0 \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         else
+            #sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,cifsacl,uid=$USER,sec=${SEC},vers=$VERSION \
+            sudo /bin/mount -o user=$USER,password=$PASSWORD,iocharset=utf8,uid=$USER,gid=$_GID \
+               -n -t cifs //$SERVER/$SHARE $MOUNT_POINT >> $_logfile 2>&1
+         fi
+      fi
+   else
+      echo "mount point $MOUNT_POINT already exists. nothing left to do.." >> $_logfile
+   fi
+
+done
+

group_vars/mbr.yml

@@ -615,6 +615,7 @@ nis_user:
       - all-users
       - buero-scan
       - mbr-buero
+      - technik
     is_samba_user: true
     password: 'i4/x3S-TJk.P'
 

group_vars/sprachenatelier.yml

@@ -134,6 +134,7 @@ nis_groups:
 #  - name: simone
 
 nis_user:
+
   - name: chris
     groups:
       - intern

roles/ansible_dependencies-trixie/tasks/main.yml

@@ -0,0 +1,68 @@
+---
+
+- name: Ensure python3 and python3-apt are present (bootstrap)
+  ansible.builtin.raw: |
+    test -x /usr/bin/python3 && dpkg -s python3-apt >/dev/null 2>&1 \
+    || (apt-get update -y && apt-get install -y python3 python3-apt)
+  changed_when: false
+
+
+# Ab dem Zeitpunkt in dem Python auf dem Zielsystem vorhanden ist,
+# kann Ansible wieder normale Module (wie apt, file, service, copy, usw.) benutzen.
+# 
+# Aber:
+# Da gather_facts: false gesetzt war, hat Ansible bis hierher keine Systeminformationen (Facts) wie:
+# 
+#     ansible_distribution
+# 
+#     ansible_fqdn
+# 
+#     ansible_memtotal_mb
+# 
+#     ansible_interfaces
+# 
+#     etc.
+#     eingesammelt.
+# 
+# Rufe das 'setup'-Modul manuell auf mit:
+#
+#    - name: Enable facts now that Python exists
+#       ansible.builtin.setup:
+# 
+# Damit holt Ansible nachträglich die Facts, jetzt, wo Python verfügbar ist.
+#
+- name: Enable facts now that Python exists
+  ansible.builtin.setup:
+
+
+- name: Ensure aptitude is present (optional)
+  ansible.builtin.raw: |
+    test -x /usr/bin/aptitude || (apt-get update -y && apt-get install -y aptitude)
+  changed_when: false
+  when: (aptitude_needed | default(false)) | bool
+
+- name: Update apt cache
+  ansible.builtin.apt:
+    update_cache: true
+    cache_valid_time: "{{ apt_update_cache_valid_time | default(3600) }}"
+
+- name: Fix half-configured packages (dpkg --configure -a)
+  ansible.builtin.command: dpkg --configure -a
+  register: dpkg_config
+  changed_when: (dpkg_config.stdout | default('')) | length > 0
+  when: (apt_dpkg_configure | default(true)) | bool
+  tags: [ansible-dependencies]
+
+- name: Upgrade packages
+  ansible.builtin.apt:
+    upgrade: "{{ apt_upgrade_type | default('safe') }}"
+    update_cache: true
+    dpkg_options: "{{ (apt_upgrade_dpkg_options | default(['force-confdef','force-confold'])) | join(',') }}"
+  when: (apt_upgrade | default(false)) | bool
+  tags: [ansible-dependencies]
+
+- name: Install Ansible dependencies
+  ansible.builtin.apt:
+    name: "{{ apt_ansible_dependencies_trixie | default(['python3','python3-apt']) }}"
+    state: "{{ apt_install_state | default('present') }}"
+  tags: [ansible-dependencies]

roles/ansible_dependencies-trixie/tasks/main.yml.01

@@ -0,0 +1,68 @@
+---
+
+- name: Ensure python3 and python3-apt are present (bootstrap)
+  ansible.builtin.raw: |
+    test -x /usr/bin/python3 && dpkg -s python3-apt >/dev/null 2>&1 \
+    || (apt-get update -y && apt-get install -y python3 python3-apt)
+  changed_when: false
+
+
+# Ab dem Zeitpunkt in dem Python auf dem Zielsystem vorhanden ist,
+# kann Ansible wieder normale Module (wie apt, file, service, copy, usw.) benutzen.
+# 
+# Aber:
+# Da gather_facts: false gesetzt war, hat Ansible bis hierher keine Systeminformationen (Facts) wie:
+# 
+#     ansible_distribution
+# 
+#     ansible_fqdn
+# 
+#     ansible_memtotal_mb
+# 
+#     ansible_interfaces
+# 
+#     etc.
+#     eingesammelt.
+# 
+# Rufe das 'setup'-Modul manuell auf mit:
+#
+#    - name: Enable facts now that Python exists
+#       ansible.builtin.setup:
+# 
+# Damit holt Ansible nachträglich die Facts, jetzt, wo Python verfügbar ist.
+#
+- name: Enable facts now that Python exists
+   ansible.builtin.setup:
+
+
+- name: Ensure aptitude is present (optional)
+  ansible.builtin.raw: |
+    test -x /usr/bin/aptitude || (apt-get update -y && apt-get install -y aptitude)
+  changed_when: false
+  when: (aptitude_needed | default(false)) | bool
+
+- name: Update apt cache
+  ansible.builtin.apt:
+    update_cache: true
+    cache_valid_time: "{{ apt_update_cache_valid_time | default(3600) }}"
+
+- name: Fix half-configured packages (dpkg --configure -a)
+  ansible.builtin.command: dpkg --configure -a
+  register: dpkg_config
+  changed_when: (dpkg_config.stdout | default('')) | length > 0
+  when: (apt_dpkg_configure | default(true)) | bool
+  tags: [ansible-dependencies]
+
+- name: Upgrade packages
+  ansible.builtin.apt:
+    upgrade: "{{ apt_upgrade_type | default('safe') }}"
+    update_cache: true
+    dpkg_options: "{{ (apt_upgrade_dpkg_options | default(['force-confdef','force-confold'])) | join(',') }}"
+  when: (apt_upgrade | default(false)) | bool
+  tags: [ansible-dependencies]
+
+- name: Install Ansible dependencies
+  ansible.builtin.apt:
+    name: "{{ apt_ansible_dependencies_trixie | default(['python3','python3-apt']) }}"
+    state: "{{ apt_install_state | default('present') }}"
+  tags: [ansible-dependencies]

roles/ansible_dependencies-trixie/tasks/main.yml.02

@@ -0,0 +1,72 @@
+---
+
+# --- Nur fürs Bootstrap, damit Python für Ansible verfügbar ist ---
+- name: Ensure python3 and python3-apt are present (bootstrap)
+  ansible.builtin.raw: |
+    test -x /usr/bin/python3 || (apt-get -y update && apt-get install -y python3)
+    test -x /usr/bin/python3 && (apt-get -y update && apt-get install -y python3-apt)
+  changed_when: false
+
+
+# Ab dem Zeitpunkt in dem Python auf dem Zielsystem vorhanden ist,
+# kann Ansible wieder normale Module (wie apt, file, service, copy, usw.) benutzen.
+# 
+# Aber:
+# Da gather_facts: false gesetzt war, hat Ansible bis hierher keine Systeminformationen (Facts) wie:
+# 
+#     ansible_distribution
+# 
+#     ansible_fqdn
+# 
+#     ansible_memtotal_mb
+# 
+#     ansible_interfaces
+# 
+#     etc.
+#     eingesammelt.
+# 
+# Rufe das 'setup'-Modul manuell auf mit:
+#
+#    - name: Enable facts now that Python exists
+#       ansible.builtin.setup:
+# 
+# Damit holt Ansible nachträglich die Facts, jetzt, wo Python verfügbar ist.
+#
+- name: Enable facts now that Python exists
+  ansible.builtin.setup:
+
+# --- Ab hier normale Module verwenden ---
+- name: Update APT cache
+  ansible.builtin.apt:
+    update_cache: true
+    cache_valid_time: "{{ apt_update_cache_valid_time | default(3600) }}"
+  tags: [ansible-dependencies]
+
+- name: Ensure aptitude is present
+  ansible.builtin.apt:
+    name: aptitude
+    state: present
+  tags: [ansible-dependencies]
+
+- name: dpkg --configure -a
+  ansible.builtin.command: dpkg --configure -a
+  register: dpkg_out
+  # "changed" nur, wenn es wirklich etwas ausgibt/konfiguriert
+  changed_when: dpkg_out.stdout is defined and dpkg_out.stdout | length > 0
+  when: apt_dpkg_configure | bool
+  tags: [ansible-dependencies]
+
+- name: apt upgrade
+  ansible.builtin.apt:
+    upgrade: "{{ apt_upgrade_type }}"
+    update_cache: true
+    dpkg_options: "{{ apt_upgrade_dpkg_options | join(',') }}"
+  when: apt_upgrade | bool
+  tags: [ansible-dependencies]
+
+- name: apt install ansible dependencies
+  ansible.builtin.apt:
+    name: "{{ apt_ansible_dependencies_trixie }}"
+    state: "{{ apt_install_state }}"
+  tags: [ansible-dependencies]
+

roles/common/tasks/nis-user-systemfiles.yml

@@ -52,27 +52,27 @@
     - profile
 
 
-# 1) Für jeden NIS-User prüfen, ob eine lokale _profile existiert
+# 1) Für jeden NIS-User prüfen, ob eine lokale _profile.j2 existiert
-- name: (nis-user-systemfiles.yml) stat user _profile
+- name: (nis-user-systemfiles.yml) stat user _profile.j2
   ansible.builtin.stat:
-    path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ item.name }}/_profile"
+    path: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/DEFAULT/_profile.j2"
   delegate_to: localhost
   become: false
   loop: "{{ nis_user }}"
-  register: profile_stats
+  register: profile_template_stats
   loop_control:
     label: "{{ item.name }}"
 
-# 2) Falls NIS-User _profile vorhanden, kopieren
+# 2) Falls _profile.j2 vorhanden, .profile aus Template rendern
-- name: (nis-user-systemfiles.yml) copy .profile if it exists
+- name: (nis-user-systemfiles.yml) template .profile if _profile.j2 exists
-  ansible.builtin.copy:
+  ansible.builtin.template:
-    src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/{{ user.name }}/_profile"
+    src: "{{ inventory_dir }}/files/{{ nis_domain }}/homedirs/DEFAULT/_profile.j2"
     dest: "~{{ user.name }}/.profile"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
     mode: "0644"
   become: true
-  loop: "{{ nis_user | zip(profile_stats.results) | list }}"
+  loop: "{{ nis_user | zip(profile_template_stats.results) | list }}"
   loop_control:
     label: "{{ user.name }}"
   when:
@@ -83,6 +83,8 @@
   tags: [bash]
 
 
+
+
 # --
 # Copy .bashrc
 # ---