freeipa/install/share/advise/legacy/sssd.conf.template

[sssd]
services = nss, pam
config_file_version = 2
domains = default
re_expression = (?P<name>.+)

[domain/default]
cache_credentials = True
id_provider = ldap
auth_provider = ldap
ldap_uri = ldap://$IPA_SERVER_HOSTNAME
ldap_search_base = cn=compat,$BASE_DN
ldap_tls_cacert = /etc/openldap/cacerts/ipa.crt
Add ipa-advise plugins for legacy clients Old versions of SSSD do not directly support cross-realm trusts between IPA and AD. This patch introduces plugins for the ipa-advise tool, which should help with configuring an old version of SSSD (1.5-1.8) to gain access to resources in trusted domain. Since the configuration steps differ depending on whether the platform includes the authconfig tool, two plugins are needed: * config-redhat-sssd-before-1-9 - provides configuration for Red Hat based systems, as these system include the autconfig utility * config-generic-sssd-before-1-9 - provides configuration for other platforms https://fedorahosted.org/freeipa/ticket/3671 https://fedorahosted.org/freeipa/ticket/3672 2013-08-01 07:12:39 -05:00			`[sssd]`
			`services = nss, pam`
			`config_file_version = 2`
			`domains = default`
			`re_expression = (?P<name>.+)`

			`[domain/default]`
			`cache_credentials = True`
			`id_provider = ldap`
			`auth_provider = ldap`
			`ldap_uri = ldap://$IPA_SERVER_HOSTNAME`
			`ldap_search_base = cn=compat,$BASE_DN`
			`ldap_tls_cacert = /etc/openldap/cacerts/ipa.crt`