Autofs

Add variables and modify template to allow sssd role to configure autofs

defaults/main.yml

@@ -4,6 +4,14 @@
 sssd_pkg_name: sssd
 sssd_daemon_name: sssd
 sssd_config_path: /etc/sssd/sssd.conf
+sssd_config_file_version: 2
+
+sssd_services:
+  - pam
+  - nss
+
+sssd_reconnection_retries: 3
+sssd_sbus_timeout: 30
 
 sssd_ldap_server: ldaphost
 sssd_ldap_uri: "ldap://{{ sssd_ldap_server }}/"
@@ -11,11 +19,39 @@ sssd_ldap_search_base: t=uk-ac-jccs
 sssd_ldap_user_search_base: "{{ sssd_ldap_search_base }}"
 sssd_ldap_group_search_base: "{{ sssd_ldap_search_base }}"
 
+sssd_filter_groups: root
+sssd_filter_users: root
+
 sssd_ldap_ssl: start_tls
 sssd_ldap_tls_checkpeer: "yes"
 
+sssd_pam_id_timeout: 60
+
 sssd_offline_expiry: 0
 sssd_offline_attempts: 0
 sssd_offline_delay: 5
 
+sssd_enumerate: "False"
+sssd_ldap_schema: rfc2307bis
+
+sssd_ldap_user_fullname: fullName
+sssd_ldap_user_member_of: groupMembership
+sssd_ldap_group_member: uniqueMember
+sssd_ldap_group_object_class: groupOfNames
+sssd_ldap_group_nesting_level: "0"
+
+sssd_id_provider: ldap
+sssd_auth_provider: ldap
+
+sssd_domain_debug_level: "0"
+
+sssd_cache_credentials: "True"
+
+sssd_ignore_group_members: "True"
+
+sssd_refresh_expired_interval: 3600
+sssd_cached_auth_timeout: 45
+
+sssd_enable_autofs: False
+
 sssd_mkhomedir: true