debops.sssd

The sssd daemon, maintained by the SSSD Project, is a spinoff from the FreeIPA Project and provides a modern take on venerable daemons such as debops.nslcd, debops.nscd and unscd(1). It is used to look up user, group or other information stored in a number of different databases, such as LDAP, Kerberos, FreeIPA, Active Directory, etc. It is needed if you want to use the posixAccount and posixGroup LDAP objects to authenticate to UNIX-like hosts.

The debops.sssd Ansible role can be used to configure the sssd service on a host and, via debops.ldap role, create a bind account in the LDAP directory used by sssd to perform LDAP lookups.

• Getting started
  • Example inventory
  • Example playbook
  • Ansible tags
  • Other resources
• debops.sssd default variables
  • APT packages
  • UNIX environment
  • LDAP environment
  • Service configuration
  • Configuration for other Ansible roles
• Default variable details
  • sssd__configuration
• LDAP Directory Information Tree
  • Directory structure
  • Object Classes and Attributes
  • Access Control
  • Parent nodes
  • Child nodes

Copyright

debops.sssd - Configure LDAP support for NSS and PAM lookups

Copyright (C) 2019 Maciej Delmanowski <drybjed@gmail.com>
Copyright (C) 2021 David Härdeman <david@hardeman.nu>
Copyright (C) 2019-2021 DebOps <https://debops.org/>
SPDX-License-Identifier: GPL-3.0-only

This Ansible role is part of DebOps.

DebOps is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 3, as
published by the Free Software Foundation.

DebOps is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with DebOps. If not, see https://www.gnu.org/licenses/.