cloudamatic/mu

[domain/<%= @domain %>]
enumerate = True
#ldap_search_base = <%= @base_dn %>
#ldap_user_search_base = <%= @base_dn %>
#ldap_group_search_base = <%= @base_dn %>
krb5_server = <%= @domain.upcase %>
krb5_realm = <%= @domain.upcase %>
#ldap_tls_reqcert = allow
#ldap_id_use_start_tls = True
#ldap_tls_cacertdir = /etc/openldap/cacerts
ldap_id_mapping = True
ldap_schema = ad
ldap_use_tokengroups = False
<% if node['ad']['domain_sid'] %>
ldap_idmap_default_domain_sid = <%= node['ad']['domain_sid'] %>
<% end rescue NoMethodError %>
ldap_idmap_range_min = 10000
ldap_idmap_range_max = 40000
ldap_idmap_range_size = 29999
id_provider = ad
auth_provider = ad
access_provider = ad
# ldap_user_object_class = user
# ldap_user_object_class = user
# ldap_user_name = sAMAccountName
# ldap_user_uid_number = msSFU30UidNumber
# ldap_user_gid_number = msSFU30GidNumber
# ldap_user_gecos = displayName
# ldap_user_home_directory = msSFU30HomeDirectory
# ldap_user_shell = msSFU30LoginShell
# ldap_user_principal = userPrincipalName
# ldap_group_object_class = group
# ldap_group_name = cn
# ldap_group_gid_number = msSFU30GidNumber
#ldap_sasl_authid = <%= @krb5keytabuser %>
#krb5_fast_principal = <%= @krb5keytabuser %>
#krb5_use_fast = try
#krb5_canonicalize = false

[sssd]
services = nss, pam, ssh, pac 
config_file_version = 2
domains = <%= @domain %>

[nss]
nss_filter_groups = root
nss_filter_users = root, apache, postfix, bin, daemon, sshd, ftp, clam, centos, mysql, clam, saslauth, dbus, nagios, rpc, nscd
override_homedir = <%= @homedir %>
default_shell = /bin/bash

[pam]
pam_verbosity = 2

[sudo]

[ssh]

[pac]

[ifp]