From 44f87537bb679b42063f9f51d8318fe36ce86a42 Mon Sep 17 00:00:00 2001
From: Raphael Dannecker <raphael.dannecker@steinbeisschule-reutlingen.de>
Date: Sun, 7 Jul 2024 10:57:14 +0200
Subject: [PATCH] Extends krb5-ticket renewable_lifetime for teacherlaptops, so
 there is no need to login every day.

---
 roles/lmn_sssd/templates/sssd.conf.j2 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/lmn_sssd/templates/sssd.conf.j2 b/roles/lmn_sssd/templates/sssd.conf.j2
index f059f14..58868ce 100644
--- a/roles/lmn_sssd/templates/sssd.conf.j2
+++ b/roles/lmn_sssd/templates/sssd.conf.j2
@@ -20,3 +20,6 @@ ignore_group_members = True
 {% if groups.localhome is defined and inventory_hostname in groups.localhome %}
 override_homedir = /home/%u
 {% endif %}
+{% if groups.teacherlaptop is defined and inventory_hostname in groups.teacherlaptop %}
+krb5_renewable_lifetime = 14d
+{% endif %}