username and password

[andysmagana]

How can I hide the username and password in the microsoft.ad.ldap.yaml file ? Can you show an example?

[jborean93]

The simplest example is to retrieve the value using a lookup template for that field which was added in the PR #101.

username: '{{ lookup("env", "SOME_ENV_VAR") }}'
password: '{{ lookup("env", "OTHER_ENV_VAR") }}

You can use Kerberos auth and rely on the existing Kerberos cache (as retrieved by kinit). You may also be able to use a template to reference a var set by the extra vars in the command line but keep in mind the inventory runs before an inventory is fully available so some inventory vars might now be.