roles/services/tasks/adsamba.yml

@@ -63,15 +63,7 @@
       path: /etc/samba/smb.conf
       state: absent
       force: yes
-  
-  - name: Disable Samba client services and mask them
-    systemd:
-      name: "{{ item }}"
-      state: stopped
-      enabled: no
-      masked: yes
-    loop: "{{ samba_client_services }}"
-  
+
   - name: Join domain 
     command:
       cmd: samba-tool domain provision --realm="{{ realm }}" --domain="{{ domain }}" --dns-backend=SAMBA_INTERNAL --server-role=dc --use-rfc2307
@@ -97,6 +89,14 @@
       state: started
       enabled: yes
     when: domain_join.changed
+
+- name: Disable Samba client services and mask them
+  systemd:
+    name: "{{ item }}"
+    state: stopped
+    enabled: no
+    masked: yes
+  loop: "{{ samba_client_services }}"
   
 - name: Perform a DNS query to get the IP of google.es
   command: "dig @{{ main_dns_server }} google.es +short"