- name: Create sssd.conf
  template:
    src: templates/sssd.conf.j2
    dest: /etc/sssd/sssd.conf
    owner: root
    group: sssd
    mode: '0640'
  notify: restart sssd

- name: Start and enable sssd
  service:
    name: sssd
    state: started
    enabled: true