2023-01-18 19:32:43 +01:00
|
|
|
[sssd]
|
|
|
|
|
domains = {{ domain }}
|
|
|
|
|
config_file_version = 2
|
2023-12-19 18:38:02 +01:00
|
|
|
implicit_pac_responder = False
|
2023-01-18 19:32:43 +01:00
|
|
|
|
|
|
|
|
[domain/{{ domain }}]
|
|
|
|
|
krb5_realm = {{ domain | upper }}
|
|
|
|
|
ad_domain = {{ domain }}
|
2023-02-18 10:00:23 +01:00
|
|
|
id_provider = ad
|
2023-01-18 19:32:43 +01:00
|
|
|
access_provider = ad
|
2023-02-18 10:00:23 +01:00
|
|
|
use_fully_qualified_names = False
|
|
|
|
|
cache_credentials = True
|
|
|
|
|
krb5_store_password_if_offline = True
|
|
|
|
|
default_shell = /usr/bin/bash
|
|
|
|
|
# default: # ldap_id_mapping = True
|
|
|
|
|
ad_gpo_access_control = disabled
|
2023-01-18 19:32:43 +01:00
|
|
|
ad_gpo_ignore_unreadable = True
|
|
|
|
|
ad_maximum_machine_account_password_age = 0
|
2024-01-16 11:47:55 +01:00
|
|
|
ignore_group_members = True
|
