sssd

pdk
sssd Puppet module

Trey Dockendorf

treydock

4,093 downloads

2,976 latest version

5.0 quality score

Version information

  • 0.1.0 (latest)
  • 0.0.1
released Jun 12th 2019
This version is compatible with:
  • Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x
  • Puppet >= 5.0.0 < 7.0.0
  • RedHat
    ,
    CentOS
    ,
    Scientific
    ,
    Debian
    ,
    Ubuntu

Start using this module

Documentation

treydock/sssd — version 0.1.0 Jun 12th 2019

puppet-module-sssd

Puppet Forge Build Status

Table of Contents

  1. Overview
  2. Usage - Configuration options
  3. Reference - Parameter and detailed reference to all options
  4. Development - Guide for contributing to the module

Overview

This module manages SSSD.

Usage

sssd

include sssd

Hiera of a working SSSD deployment

sssd::configs:
  sssd:
    debug_level: 0x02F0
    domains: LDAP
    services:
      - pam
      - nss
  nss:
    debug_level: 0x02F0
    filter_groups:
      - root
      - wheel
    filter_users:
      - root
  pam:
    debug_level: 0x02F0
  domain/LDAP:
    cache_credentials: true
    debug_level: 0x02F0
    enumerate: false
    id_provider: ldap
    auth_provider: ldap
    chpass_provider: ldap
    access_provider: ldap
    ldap_uri:
      - ldaps://ldap1.example.com:636
      - ldaps://ldap2.example.com:636
    ldap_search_base: 'dc=example,dc=com'
    ldap_schema: rfc2307
    ldap_tls_reqcert: demand
    ldap_access_filter: '(&(objectClass=shadowAccount)(objectClass=posixAccount))'
    ldap_access_order:
      - filter
      - expire
    ldap_pwd_policy: shadow
    ldap_account_expire_policy: shadow
    ldap_group_member: memberuid

Reference

http://treydock.github.io/puppet-module-sssd/

Development

Testing

Testing requires the following dependencies:

  • rake
  • bundler

Install gem dependencies

bundle install

Run unit tests

bundle exec rake spec

If you have Vagrant >= 1.2.0 installed you can run system tests

BEAKER_set=centos-7 bundle exec rake beaker