Split role in desktop and infrastructure parts.

2020-12-11 11:58:23 +01:00 · 2020-12-11 11:58:23 +01:00 · a37164d01a
commit a37164d01a
parent f764745db6
9 changed files with 99 additions and 73 deletions
--- a/roles/fvs-mkhome/templates/sssd.conf.j2
+++ b/roles/fvs-mkhome/templates/sssd.conf.j2
@ -0,0 +1,22 @@
+[sssd]
+domains = LDAP
+config_file_version = 2
+services = nss, pam
+
+[nss]
+filter_groups = root
+filter_users = root
+
+[pam]
+
+[domain/LDAP]
+id_provider = ldap
+ldap_uri = ldaps://{{ ldap_server }}/
+ldap_search_base = {{ basedn }}
+
+auth_provider = ldap
+auto_private_groups = true
+
+cache_credentials = true
+
+ldap_tls_reqcert = never