I think it works, please see my whole yml file.
---
# file: test.yml
- hosts: mytest
gather_facts: yes
roles:
- role: dnsclient
nameservers:
- 1.1.1.1
- 2.2.2.2
- 3.3.3.3
search:
# - role: ntp
- role: nsswitch
ensure_vas: present
- role: proxy
group: root
port: '8080'
https_port: '8080'
no_proxy:
- localhost
- 127.0.0.1
# - role: ssh
- role: pam
ensure_vas: present
allowed_users:
- root
- user123
- ALL
limits_fragments:
msdp:
list:
- "* hard nofile 65535"
- "* soft nofile 65535"
- "drutt hard nproc 65535"
- "drutt soft nproc 65535"
- role: vas
package_version: '4.1.0-22002'
keytab_source: 'vasinst.key'
vas_conf_update_process: '/opt/quest/libexec/vas/mapupdate_2307'
users_allow_entries:
- ABC\cnshrndithub
- ABC\hub-adm-cnsh
computers_ou: 'OU=UNIX,OU=ABC,OU=HUB,OU=P006,OU=SVC,OU=Data,DC=abcompany,DC=se'
users_ou: 'ou=sh,ou=China,ou=users,ou=eunix,dc=eapac,dc=abcompany,dc=se'
nismaps_ou: 'OU=NIS,OU=ABC,OU=HUB,OU=P006,OU=SVC,OU=Data,DC=abcompany,DC=se'
sitenameoverride: Sapac09
vas_conf_upm_computerou_attr: 'department'
vas_conf_libvas_auth_helper_timeout: '120'
vas_conf_vasd_cross_domain_user_groups_member_search: 'true'
vas_conf_preload_nested_memberships: 'false'
symlink_vastool_binary: 'true'