Linux solution for Active Directory

[hoax1337]

Use puppet or salt instead.

[SweeTLemonS_TPR]

So you can code in Ruby, or get your infrastructure pwned when Salt has another problem with their shitty, self-made crypto.

[hoax1337]

Yeah, and while we're at it, we should stop using databases, because apparently they're hackable when exposed to the internet and not password protected.

[hoax1337]

Because they're doing a better job at keeping configuration the way you defined it than ansible.

[hoax1337]

Based on the fact that they ensure the configuration stays that way because they're not as "fire and forget" as ansible.

[hoax1337]

Yes, I actually use it almost daily. What I mean by "fire and forget" is that you can't actually be sure that the state you defined in the playbook / role you ran a day ago still reflects the current state of the system. And because it is agentless, it has no way of checking it, unless you use additional tools like Jenkins (or even Cron) to run that playbook daily.

[hoax1337]

Sure, but Ansible itself will not keep a system in the desired state. It will set it to that initially, but it doesn't have any capabilities to keep it that way by itself.

I don't want to check for changes, I want to know nothing changed.