---
# ansible-playbook /etc/ansible/Playbooks/new_ldap_user.yml  -K --ask-vault-pass
# --extra-vars="file=account.csv"
  - name: set some vars
    ansible.builtin.set_fact:
      binddn: "{{ lookup( 'viczem.keepass.keepass', 'opendoor/collidine_ldap_password', 'username' ) }}"
      bindpwd:  "{{ lookup( 'viczem.keepass.keepass', 'opendoor/collidine_ldap_password', 'password' ) }}"
    tags: always
    when: binddn is not defined

  - name: read csv file
    community.general.read_csv:
      path: '{{ file|default( "account.csv" ) }}'
    register: users
    delegate_to: localhost

  - include_tasks: ldap_user_inc.yml
    loop: "{{ users.list }}"