initial commit

roles/identity_ad/templates/sssd.conf.j2

@@ -0,0 +1,23 @@
+# {{ ansible_managed }}
+[sssd]
+services = nss, pam
+domains = {{ ad_domain }}
+
+[domain/{{ ad_domain }}]
+id_provider = ad
+access_provider = simple
+simple_allow_groups = {{ ad_admin_group }}, {{ ad_operator_group }}
+auth_provider = ad
+chpass_provider = ad
+
+ad_domain = {{ ad_domain }}
+krb5_realm = {{ ad_domain_realm }}
+
+use_fully_qualified_names = {{ sssd_use_fully_qualified_names | lower }}
+fallback_homedir = /home/%d/%u
+default_shell = /bin/bash
+
+cache_credentials = true
+enumerate = false
+
+ldap_id_mapping = true