it-team/lmn-client
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prevent login without krb5-ticket on non localhome machines

Browse source
This commit is contained in:
Raphael Dannecker 2025-11-17 12:20:55 +01:00
parent 71d2ddbb38
commit 17ad6c5e1a
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/lmn_sssd/templates/sssd.conf.j2
View file

@ -9,7 +9,9 @@ ad_domain = {{ domain }}
id_provider = ad id_provider = ad
access_provider = ad access_provider = ad
use_fully_qualified_names = False use_fully_qualified_names = False
{% if localhome is defined and localhome %}
cache_credentials = True cache_credentials = True
{% endif %}
krb5_store_password_if_offline = True krb5_store_password_if_offline = True
default_shell = /usr/bin/bash default_shell = /usr/bin/bash
# default: # ldap_id_mapping = True # default: # ldap_id_mapping = True