IPA client's sssd.conf

[Ronald Wimmer]

Is there a way to set some default keys and values that end up in an IPA 
client's sssd.conf upon ipa-client-install?

Cheers,
Ronald

[Alexander Bokovoy]

On pe, 28 helmi 2020, Ronald Wimmer via FreeIPA-users wrote:
>  Is there a way to set some default keys and values that end up in an
> IPA 
>  client's sssd.conf upon ipa-client-install? 
I don't think of any that are applied right now other than implicitly
being derived from some configuration like local ID view or domain
resolution order.

Do you have examples of what specifically you want to do?

-- 
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland

[Ronald Wimmer]

I would like to set values for


On 28.02.20 08:53, Alexander Bokovoy wrote:
> On pe, 28 helmi 2020, Ronald Wimmer via FreeIPA-users wrote:
>> Is there a way to set some default keys and values that end up in an 
>> IPA client's sssd.conf upon ipa-client-install?
> 
> I don't think of any that are applied right now other than implicitly
> being derived from some configuration like local ID view or domain
> resolution order.
> 
> Do you have examples of what specifically you want to do?
>

[Sumit Bose]

On Fri, Feb 28, 2020 at 08:44:48AM +0100, Ronald Wimmer via FreeIPA-users wrote:
>  Is there a way to set some default keys and values that end up in an
> IPA
>  client's sssd.conf upon ipa-client-install? 
Hi,

would it help to create a file in /etc/sssd/conf.d/ with the config
settings you would like to add before calling ipa-client-install? See
section 'CONFIGURATION SNIPPETS FROM INCLUDE DIRECTORY' in the sssd.conf
man page for more details.

bye,
Sumit

>  
>  Cheers,
>  Ronald
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...

[Ronald Wimmer]

On 28.02.20 10:04, Sumit Bose via FreeIPA-users wrote:
>  would it help to create a file in/etc/sssd/conf.d/  with the config
>  settings you would like to add before calling ipa-client-install? See
>  section 'CONFIGURATION SNIPPETS FROM INCLUDE DIRECTORY' in the sssd.conf
>  man page for more details. 
Thank you! That seems to help. We can either place something to that 
particular directory upon VM deployment or push it there via Ansible.

Cheers,
Ronald