lmn-client/roles/lmn_sssd/templates/sssd.conf.j2
Raphael Dannecker 08f0f082fd Introduction of a new device class (localhome).
- user-home is on local disk
- additional entry in dolphin: home@server
- display info about localhome on login-screen
- provide unison-config for sync home with home@server
- force user to be logged out immediately after first login, because
  home-dir must exists for bind-mounts on /lmn/media
2024-04-28 19:37:13 +02:00

22 lines
625 B
Django/Jinja

[sssd]
domains = {{ domain }}
config_file_version = 2
implicit_pac_responder = False
[domain/{{ domain }}]
krb5_realm = {{ domain | upper }}
ad_domain = {{ domain }}
id_provider = ad
access_provider = ad
use_fully_qualified_names = False
cache_credentials = True
krb5_store_password_if_offline = True
default_shell = /usr/bin/bash
# default: # ldap_id_mapping = True
ad_gpo_access_control = disabled
ad_gpo_ignore_unreadable = True
ad_maximum_machine_account_password_age = 0
ignore_group_members = True
{% if groups.localhome is defined and inventory_hostname in groups.localhome %}
override_homedir = /home/%u
{% endif %}