foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sssd: Sort and group config options

Browse source
This commit is contained in:
Timo Makinen 2025-01-31 16:42:02 +00:00
parent eaead4bc7f
commit 71a69af472
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
roles/sssd/templates/sssd.conf.j2
View file

@ -8,11 +8,11 @@ domains = {{ kerberos_realm }}
[pam] [pam]
[domain/{{ kerberos_realm }}] [domain/{{ kerberos_realm }}]
id_provider = ldap
auth_provider = krb5
chpass_provider = ldap
autofs_provider = none autofs_provider = none
sudo_provider = none sudo_provider = none
id_provider = ldap
chpass_provider = ldap
ldap_uri = ldaps://{{ ldap_server[0] }} ldap_uri = ldaps://{{ ldap_server[0] }}
ldap_search_base = {{ ldap_basedn }} ldap_search_base = {{ ldap_basedn }}
ldap_schema = rfc2307bis ldap_schema = rfc2307bis
@ -25,4 +25,6 @@ ldap_sasl_mech = EXTERNAL
ldap_tls_cacert = {{ tls_bundle }} ldap_tls_cacert = {{ tls_bundle }}
ldap_tls_cert = {{ tls_certs }}/{{ inventory_hostname }}.crt ldap_tls_cert = {{ tls_certs }}/{{ inventory_hostname }}.crt
ldap_tls_key = {{ tls_private }}/{{ inventory_hostname }}.key ldap_tls_key = {{ tls_private }}/{{ inventory_hostname }}.key
auth_provider = krb5
krb5_realm = {{ kerberos_realm }} krb5_realm = {{ kerberos_realm }}