Implement NFS4 server role.

2019-11-17 19:12:22 +01:00 · 2019-11-17 19:12:22 +01:00 · ece5bca5b5
commit ece5bca5b5
parent 7e1332ee46
4 changed files with 104 additions and 0 deletions
--- a/roles/nfs-server/templates/sssd.conf.j2
+++ b/roles/nfs-server/templates/sssd.conf.j2
@ -0,0 +1,24 @@
+[sssd]
+domains = LDAP
+services = nss, pam
+config_file_version = 2
+
+[nss]
+filter_groups = root
+filter_users = root
+
+[pam]
+
+[domain/LDAP]
+id_provider = ldap
+ldap_uri = ldap://{{ ansible_hostname }}/
+ldap_search_base = {{ basedn }}
+
+auth_provider = krb5
+krb5_server = {{ ansible_hostname }}
+krb5_realm = {{ ldap_domain | upper }}
+cache_credentials = false
+
+min_id = 10000
+max_id = 20000
+enumerate = False