jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-07-29 10:45:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2023-05-03 11:00

Browse Source
This commit is contained in:
Daniel Berteaud
2023-05-03 11:00:11 +02:00
parent e8adef3130
commit 4e82ed1972
5 changed files with 18 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/sssd_ad_auth/templates/sssd.conf.j2
View File

@@ -1,5 +1,6 @@
[sssd]
services = nss, pam, pac
services = nss, pam, pac{% if ad_ldap_user_ssh_public_key is defined %}, ssh{% endif %}
config_file_version = 2
domains = {{ ad_realm | upper }}{% for domain in ad_trusted_domains %}, {{ domain.name | upper }}{% endfor %}
@@ -39,6 +40,9 @@ dyndns_update = false
{% if ad_private_groups %}
auto_private_groups = true
{% endif %}
{% if ad_ldap_user_ssh_public_key is defined %}
ldap_user_ssh_public_key = {{ ad_ldap_user_ssh_public_key }}
{% endif %}
{% for domain in ad_trusted_domains %}
@@ -63,4 +67,7 @@ ldap_user_search_base = {{ domain.ldap_user_search_base }}
ldap_group_search_base = {{ domain.ldap_group_search_base }}
{% endif %}
ad_gpo_access_control = {{ domain.ad_gpo_access_control | default(ad_gpo_access_control) }}
{% if domain.ad_ldap_user_ssh_public_key is defined or ad_ldap_user_ssh_public_key is defined %}
ldap_user_ssh_public_key = {{ domain.ad_ldap_user_ssh_public_key | default(ad_ldap_user_ssh_public_key) }}
{% endif %}
{% endfor %}