diff options
| author | B Stack <bgstack15@gmail.com> | 2016-09-29 16:01:25 -0400 |
|---|---|---|
| committer | B Stack <bgstack15@gmail.com> | 2016-09-29 16:01:25 -0400 |
| commit | 4db266d0ec2f78079c8ff271cdb2e78230d3b090 (patch) | |
| tree | 0df576efa0b3cc31e548904343a10fe43318b508 /company/ad-templates/sssd.conf.FreeBSD | |
| parent | readme (diff) | |
| download | ansible01-4db266d0ec2f78079c8ff271cdb2e78230d3b090.tar.gz ansible01-4db266d0ec2f78079c8ff271cdb2e78230d3b090.tar.bz2 ansible01-4db266d0ec2f78079c8ff271cdb2e78230d3b090.zip | |
major overhaul
Diffstat (limited to 'company/ad-templates/sssd.conf.FreeBSD')
| -rw-r--r-- | company/ad-templates/sssd.conf.FreeBSD | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/company/ad-templates/sssd.conf.FreeBSD b/company/ad-templates/sssd.conf.FreeBSD new file mode 100644 index 0000000..9add0ed --- /dev/null +++ b/company/ad-templates/sssd.conf.FreeBSD @@ -0,0 +1,41 @@ +# Ansible-controlled filename: /etc/sssd/sssd.conf +# Source: ansible sssd.conf.FreeBSD +# Date: 2016-03-04 +# Reference: Building the Centos 7 Template.docx +# NOTE: This file is managed via Ansible: manual changes will be lost + +[domain/default] +autofs_provider = ldap +cache_credentials = True +krb5_realm = EXAMPLE.COM +ldap_search_base = dc=example,dc=com +krb5_server = dc1.example.com,dc2.example.com,dc3.example.com,dc4.example.com +id_provider = ldap +auth_provider = krb5 +chpass_provider = krb5 +krb5_store_password_if_offline = True +ldap_uri = ldap://example.com +krb5_kpasswd = dc1.example.com,dc2.example.com,dc3.example.com,dc4.example.com +ldap_tls_cacertdir = /etc/openldap/cacerts + +[sssd] +domains = default, example.com +config_file_version = 2 +services = nss, pam + +[domain/example.com] +ad_domain = example.com +krb5_realm = EXAMPLE.COM +realmd_tags = manages-system joined-with-samba +cache_credentials = True +id_provider = ad +krb5_store_password_if_offline = True +default_shell = /bin/bash +ldap_id_mapping = False +use_fully_qualified_names = False +fallback_homedir = /home/%d/%u +access_provider = ad +ad_access_filter = (&(memberOf=CN=Linux-Server-Access_grp,OU=Linux-Access,OU=Accounts-Groups,DC=example,DC=com)(unixHomeDirectory=*)) +simple_allow_users = bgstack15, bgstack15, user16, user16 +case_sensitive = true +ad_gpo_access_control = disabled |