FAILED! => {"changed": false, "failed": true, "msg": "/etc/ssh/sshd_config: line 8: Bad configuration option: AuthorizedKeysCommandUser\r\n/etc/ssh/sshd_config line 21: Bad yes/no argument: sandbox\r\n"}
Currently there are few pieces to this playbook that a really inefficient.
Include check to determine if we even need to install packages. Seems like there should be a good way to check for the existence of select packages before attempting to move forward. yum list installed maybe.
Include test to determine if host is already bound to a realm. No need to continue process if this is the case.
Might need to create an override variable, should the user need/want to re-configure though. "adjoin_reconfigure = false" as a default, or something similar.
Look into using realm to replace much of this; include step to skip non-RHEL based distros. Will eventually add Ubuntu as well. Haven't checked this against OEL, not sure it is worth the effort.