Files
ansible-linux-infra/roles/identity_ad/templates/sssd.conf.j2
2026-08-19 09:51:43 +02:00

24 lines
516 B
Django/Jinja

# {{ ansible_managed }}
[sssd]
services = nss, pam
domains = {{ ad_domain }}
[domain/{{ ad_domain }}]
id_provider = ad
access_provider = simple
simple_allow_groups = {{ ad_admin_group }}, {{ ad_operator_group }}
auth_provider = ad
chpass_provider = ad
ad_domain = {{ ad_domain }}
krb5_realm = {{ ad_domain_realm }}
use_fully_qualified_names = {{ sssd_use_fully_qualified_names | lower }}
fallback_homedir = /home/%d/%u
default_shell = /bin/bash
cache_credentials = true
enumerate = false
ldap_id_mapping = true