foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sssd: More specific config options to sssd.conf

Browse source
This commit is contained in:
Timo Makinen 2020-11-15 16:52:09 +00:00
parent 4f98c287ab
commit 9e3b204b3a
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/sssd/templates/sssd.conf.j2
View file

@ -15,9 +15,13 @@ ldap_uri = ldaps://{{ ldap_server[0] }}
ldap_search_base = {{ ldap_basedn }} ldap_search_base = {{ ldap_basedn }}
ldap_schema = rfc2307bis ldap_schema = rfc2307bis
ldap_group_member = uniqueMember ldap_group_member = uniqueMember
ldap_user_uuid = entryUUID
ldap_group_uuid = entryUUID
ldap_id_use_start_tls = False ldap_id_use_start_tls = False
ldap_tls_reqcert = demand ldap_tls_reqcert = demand
ldap_sasl_mech = EXTERNAL ldap_sasl_mech = EXTERNAL
ldap_tls_cacert = {{ tls_bundle }}
ldap_tls_cert = {{ tls_certs }}/{{ inventory_hostname }}.crt ldap_tls_cert = {{ tls_certs }}/{{ inventory_hostname }}.crt
ldap_tls_key = {{ tls_private }}/{{ inventory_hostname }}.key ldap_tls_key = {{ tls_private }}/{{ inventory_hostname }}.key
enumerate = true
krb5_realm = {{ kerberos_realm }} krb5_realm = {{ kerberos_realm }}