d23c5fb867
In Ubuntu 26.04, the 'files' provider has been removed, see https://sssd.io/docs/files-provider-deprecation.html It can be replaced by the 'proxy' provider, with additional property 'proxy_lib_name' set to 'files'. This configuration is compatible with Ubuntu 22.04, 24.04 and 26.04 LTS, and all intermediate versions. Solves issue #16
49 lines
1.1 KiB
Plaintext
49 lines
1.1 KiB
Plaintext
# SSSD configuration for Kerberos in Orange network
|
|
#
|
|
[sssd]
|
|
config_file_version = 2
|
|
domains = ad.francetelecom.fr
|
|
certificate_verification = no_ocsp
|
|
|
|
|
|
[nss]
|
|
filter_users = root
|
|
filter_groups = root
|
|
|
|
|
|
[pam]
|
|
pam_verbosity = 2
|
|
pam_account_expired_message = Account expired, please contact help desk.
|
|
pam_account_locked_message = Account locked, please contact help desk
|
|
pam_public_domains = ad.francetelecom.fr
|
|
pam_cert_auth = false
|
|
p11_child_timeout = 60
|
|
offline_credentials_expiration = 0
|
|
|
|
|
|
[domain/ad.francetelecom.fr]
|
|
id_provider = proxy
|
|
proxy_lib_name = files
|
|
min_id = 1000
|
|
max_id = 60000
|
|
#
|
|
auth_provider = krb5
|
|
krb5_realm = AD.FRANCETELECOM.FR
|
|
krb5_auth_timeout = 10
|
|
krb5_store_password_if_offline = true
|
|
krb5_lifetime = 24h
|
|
krb5_renewable_lifetime = 7d
|
|
krb5_renew_interval = 30m
|
|
krb5_use_kdcinfo = true
|
|
krb5_kdcinfo_lookahead = 5:2
|
|
krb5_ccachedir = /tmp
|
|
krb5_ccname_template = FILE:%d/krb5cc_%U
|
|
dns_discovery_domain = S-FT-FR-EBU._sites.ad.francetelecom.fr
|
|
#
|
|
chpass_provider = none
|
|
#
|
|
cache_credentials = true
|
|
use_fully_qualified_names = false
|
|
lookup_family_order = ipv4_only
|
|
|