initial

templates/lab-sudo

@@ -0,0 +1,2 @@
+%sudo ALL=(ALL)	NOPASSWD:	ALL
+

templates/ldap.conf

@@ -0,0 +1,32 @@
+#
+# LDAP Defaults
+#
+
+# See ldap.conf(5) for details
+# This file should be world readable but not world writable.
+
+#BASE	dc=example,dc=com
+#URI	ldap://ldap.example.com ldap://ldap-master.example.com:666
+
+#SIZELIMIT	12
+#TIMELIMIT	15
+#DEREF		never
+
+# When no CA certificates are specified the Shared System Certificates
+# are in use. In order to have these available along with the ones specified
+# by TLS_CACERTDIR one has to include them explicitly:
+#TLS_CACERT	/etc/pki/tls/cert.pem
+
+# System-wide Crypto Policies provide up to date cipher suite which should
+# be used unless one needs a finer grinded selection of ciphers. Hence, the
+# PROFILE=SYSTEM value represents the default behavior which is in place
+# when no explicit setting is used. (see openssl-ciphers(1) for more info)
+#TLS_CIPHER_SUITE PROFILE=SYSTEM
+
+# Turning this off breaks GSSAPI used with krb5 when rdns = false
+SASL_NOCANON	on
+
+BASE dc=dell-atc,dc=lan
+URI ldap://atc-mgt01.dell-atc.lan
+
+

templates/ssh.conf

@@ -0,0 +1,3 @@
+Host *
+    ForwardAgent yes
+

templates/sshd.conf

@@ -0,0 +1,4 @@
+PermitRootLogin yes
+AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
+AuthorizedKeysCommandUser nobody
+

templates/sssd.conf

@@ -0,0 +1,48 @@
+# ------------------------------------------------------------------
+# /etc/sssd/sssd.conf
+# Do not directly edit this file! It will be overwritten during boot
+# or configuration changes
+# ------------------------------------------------------------------
+#
+[sssd]
+services = nss, pam, ssh, autofs, sudo
+domains = default
+[nss]
+[pam]
+[sudo]
+[autofs]
+[ssh]
+[pac]
+[ifp]
+[domain/default]
+# debug_level = 9
+ldap_schema = rfc2307
+#
+autofs_provider = ldap
+id_provider     = ldap
+auth_provider   = ldap
+chpass_provider = ldap
+sudo_provider   = ldap
+# Fix EL7 automount bug: 
+# setautomntent: lookup(sss): setautomntent: No such file or directory
+ldap_autofs_map_object_class   = automountMap
+ldap_autofs_map_name           = ou
+ldap_autofs_entry_object_class = automount
+ldap_autofs_entry_key          = cn
+ldap_autofs_entry_value        = automountInformation
+ldap_chpass_update_last_change = true
+# Kerberos - not used
+krb5_realm            = EXAMPLE.COM
+krb5_server           = kerberos.example.com
+# LDAP settings
+ldap_id_use_start_tls = False
+ldap_tls_reqcert      = never
+cache_credentials     = True
+ldap_tls_cacertdir    = /etc/openldap/cacerts
+#
+
+ldap_uri = ldap://atc-mgt01.dell-atc.lan
+ldap_search_base = dc=dell-atc,dc=lan
+
+# override_homedir = /labusers/%u
+