Update to 2024-04-05 10:01

roles/sssd_ad_auth/tasks/main.yml

@@ -27,6 +27,28 @@
   notify: restart sssd ad
   tags: auth
 
+- name: Create systemd snippet dir
+  file: path=/etc/systemd/system/sssd.service.d state=directory
+  tags: auth
+
+  # sssd can fail, especially when storage gets slow (which can happen during backups for example)
+- name: Configure sssd to restart on failure
+  copy:
+    content: |
+      [Service]
+      Restart=on-failure
+      StartLimitInterval=0
+      RestartSec=30
+    dest: /etc/systemd/system/sssd.service.d/ansible.conf
+  register: sssd_unit
+  notify: restart sssd ad
+  tags: auth
+
+- name: Reload systemd
+  systemd: daemon_reload=true
+  when: sssd_unit.changed
+  tags: auth
+
 - name: Deploy krb5 configuration
   template: src=krb5.conf.j2 dest=/etc/krb5.conf
   tags: auth