Ansible roles
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

25 lines
637 B

[sssd]
services = nss, pam
config_file_version = 2
domains = {{ ad_realm }}
[nss]
shell_fallback = /bin/false
[pam]
[domain/{{ ad_realm }}]
id_provider = ad
ad_hostname = {{ ansible_hostname }}.{{ ad_realm | lower }}
fallback_homedir = /home/%d/%u
default_shell = /bin/false
cache_credentials = true
enumerate = true
access_provider = ad
ad_access_filter = {{ ad_access_filter }}
{% if ad_ldap_group_search_base is defined %}
ldap_group_search_base = {{ ad_ldap_group_search_base }}
{% elif ad_ignore_groups | length > 0 %}
ldap_group_search_base = {{ ad_ldap_base }}?sub?(!(|(cn={{ ad_ignore_groups | join(')(cn=') }})))
{% endif %}