Attached is the sssd.conf file

best regards

Wolfgang

*Amino |* Mob: +44 7554 457 455 *|* Desk: +44 1954 234 190 *|* skype:
wszachauamino

On 08/07/11 12:45, Debian Bug Tracking System wrote:
> Thank you for filing a new Bug report with Debian.
>
> This is an automatically generated reply to let you know your message
> has been received.
>
> Your message is being forwarded to the package maintainers and other
> interested parties for their attention; they will reply in due course.
>
> Your message has been sent to the package maintainer(s):
>  Petter Reinholdtsen <[email protected]>
>
> If you wish to submit further information on this problem, please
> send it to [email protected].
>
> Please do not send mail to [email protected] unless you wish
> to report a problem with the Bug-tracking system.
>
>   
# SSSD configuration generated using /usr/lib/sssd/generate-config
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = aminocom.com

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3
debug_level = 10

[pam]
reconnection_retries = 3
debug_level = 10

[domain/aminocom.com]
; Using enumerate = true leads to high load and slow response
enumerate = false
cache_credentials = true

id_provider = ldap
auth_provider = krb5
#auth_provider = ldap
chpass_provider = krb5

ldap_uri = ldap://uk-swa-dc01.aminocom.com
ldap_search_base = CN=Users,DC=aminocom,DC=com
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt

krb5_kdcip = uk-swa-dc01.aminocom.com
krb5_realm = AMINOCOM.COM
krb5_changepw_principle = kadmin/changepw
krb5_auth_timeout = 15

; From here values added to make sssd work with AD at Amino
ldap_default_bind_dn = cn=LDAPsearch,cn=Users,dc=aminocom,dc=com
ldap_default_authtok_type = password
ldap_default_authtok = Aminocom101
ldap_user_object_class = user
ldap_user_name = sAMAccountName
ldap_user_home_directory = unixHomeDirectory
ldap_user_principal = userPrincipalName
ldap_group_object_class = group
ldap_group_member = memberUid

Reply via email to