diff --git a/roles/icinga-fk/tasks/main.yml b/roles/icinga-fk/tasks/main.yml
index 887f024..84a2a8f 100644
--- a/roles/icinga-fk/tasks/main.yml
+++ b/roles/icinga-fk/tasks/main.yml
@@ -32,6 +32,13 @@
     backup : yes
   notify:
     - restart icinga
+
+- name: python3 par defaut
+  alternatives:
+    link: /usr/bin/python
+    name: python
+    path: /usr/bin/python3
+    priority: 10
     
 - name: Changement de mot de passe de icingaadmin
   htpasswd:
@@ -55,20 +62,45 @@
     path: /var/lib/icinga
     owner: nagios
     mode: 751
-    recurse: yes 
+    recurse: yes
   notify:
-    - restart icinga 
+    - restart icinga
 
-
-- name: attribution des droits dossier icinga rw 
+- name: attribution des droits dossier icinga rw
   file:
     path: /var/lib/icinga/rw
     owner: nagios
     mode: 2710
-    recurse: yes 
+    recurse: yes
   notify:
-    - restart icinga 
+    - restart icinga
 
+- name: activation des commandes externes
+  replace:
+    dest: /etc/icinga/icinga.cfg
+    regexp: 'check_external_commands=0'
+    replace: 'check_external_commands=1'
+  notify:
+    - restart icinga
+
+- name: reconfiguration des droits avec dpkg statoverride
+  shell: dpkg-statoverride --update --force-all --add nagios www-data 2710 /var/lib/icinga/rw
+
+- name: reconfiguration des droits avec dpkg statoverride
+  shell: dpkg-statoverride --update --force-all --add nagios nagios 751 /var/lib/icinga
+
+- name: suppression de checkresults
+  file:
+    path: /var/lib/icinga/spool/checkresults
+    state: absent
+
+- name: creation du dossier checkresults avec droits de lecture
+  file:
+    path: /var/lib/icinga/spool/checkresults
+    state: directory
+    owner: nagios     
+    group: root
+    mode: '755'
 
       #- name: Changement droit notif
       #  shell: chmod 644 /var/log/icinga/icinga.log
diff --git a/roles/itil/defaults/main.yml b/roles/itil/defaults/main.yml
index f82b605..44c63a9 100644
--- a/roles/itil/defaults/main.yml
+++ b/roles/itil/defaults/main.yml
@@ -1,4 +1,4 @@
-depl_url: "http://s-adm.gsb.adm/gsbstore"
+depl_url: "http://s-adm.gsb.adm/gsbstore/"
 depl_glpi: "glpi-9.5.3.tgz"
 depl_fusioninventory: "fusioninventory-9.5.0+1.0.tar.bz2"
 depl_fusioninventory_agentx64: "fusioninventory-agent_windows-x64_2.6.exe"
diff --git a/roles/itil/tasks/main.yml b/roles/itil/tasks/main.yml
index 9d19ffa..e93e925 100644
--- a/roles/itil/tasks/main.yml
+++ b/roles/itil/tasks/main.yml
@@ -84,6 +84,8 @@
     file:
       path: "{{ glpi_dir }}/plugins"
       mode: 0777
+      owner: www-data
+      group: www-data
       recurse: yes
 
   - name: Attribution des permissions
@@ -98,12 +100,6 @@
       #src: http://depl/gsbstore/fusioninventory-{{ fd_version }}.tar.bz2
       dest: /var/www/html/glpi/plugins
       remote_src: yes
-    file:
-      path: /var/www/html/glpi/plugins/fusioninventory
-      state: directory
-      owner: www-data
-      group: www-data
-      mode: 0775
 
   - name: Creation de ficlient
     file:
@@ -130,6 +126,14 @@
       url: "{{ depl_url }}/{{ depl_fusioninventory_agentx86 }}"
       dest: "/var/www/html/ficlients"
 
+  - name: Attribution des permissions sur repertoire /plugins/fusioninventory
+    file:
+      path: /var/www/html/glpi/plugins/fusioninventory
+      owner: www-data
+      group: www-data
+      recurse: yes
+      state: directory
+
   - name: Copie du script dbdump
     copy: src=dbdump dest=/root/