---

# ---
# - Remove unwanted users
# ---


- name: (samba-remove-user.yml) Check if samba user exists for removable system user
  ansible.builtin.shell:
    cmd: >-
      set -o pipefail &&
      pdbedit -w -L | awk -F":" '{ print $1 }' | grep '{{ item.name }}'
    executable: /bin/bash
  register: common_samba_remove_system_users_present
  changed_when: false
  failed_when: common_samba_remove_system_users_present.rc > 1
  with_items:
    - "{{ remove_system_users }}"
  loop_control:
    label: '{{ item.name }}'
  tags:
    - samba-user


- name: (samba-remove-user.yml) Remove (old) system users from samba
  ansible.builtin.command: smbpasswd -s -x {{ item.item.name }}
  changed_when: true
  with_items:
    - "{{ common_samba_remove_system_users_present.results }}"
  loop_control:
    label: '{{ item.item.name }}'
  when:
    - item.rc == 0
  tags:
    - samba-user


- name: (samba-remove-user.yml) Check if samba user exists for removable nis user
  ansible.builtin.shell:
    cmd: >-
      set -o pipefail &&
      pdbedit -w -L | awk -F":" '{ print $1 }' | grep '{{ item.name }}'
    executable: /bin/bash
  register: common_samba_remove_nis_users_present
  changed_when: false
  failed_when: common_samba_remove_nis_users_present.rc > 1
  with_items:
    - "{{ remove_nis_users }}"
  loop_control:
    label: '{{ item.name }}'
  tags:
    - samba-user


- name: (samba-remove-user.yml) Remove (old) nis users from samba
  ansible.builtin.command: smbpasswd -s -x {{ item.item.name }}
  changed_when: true
  with_items:
    - "{{ common_samba_remove_nis_users_present.results }}"
  loop_control:
    label: '{{ item.item.name }}'
  when:
    - item.rc == 0
  tags:
    - samba-user