Added tasks to install required packages, configure Kerberos and Samba, and join the domain. This refactoring improves the automation of the setup process.
15 lines
515 B
Django/Jinja
15 lines
515 B
Django/Jinja
[global]
|
|
workgroup = {{ ad_realm.split('.')[0] }}
|
|
security = ads
|
|
realm = {{ ad_realm }}
|
|
winbind use default domain = true
|
|
winbind offline logon = false
|
|
dedicated keytab file = /etc/krb5.keytab
|
|
kerberos method = secrets and keytab
|
|
idmap config * : backend = tdb
|
|
idmap config * : range = 10000-20000
|
|
idmap config {{ ad_realm.split('.')[0] }} : backend = rid
|
|
idmap config {{ ad_realm.split('.')[0] }} : range = 20001-999999
|
|
template shell = /bin/bash
|
|
template homedir = /home/%U
|