<commit_before><%= "# This file is managed with Puppet." %>
<%-
@auth_provider = (@auth_source == "AD") ? "krb5" : "ldap"

%>


[sssd]
config_file_version = 2
domains = intranet.epfl.ch
services = nss, pam
<%= @debug_sssd ? "debug_level = 9" : "" %>

[nss]
<%= @debug_sssd ? "debug_level = 9" : "" %>

[pam]
<%= @debug_sssd ? "debug_level = 9" : "" %>

[domain/intranet.epfl.ch]
<%= @debug_sssd ? "debug_level = 9" : "" %>

ldap_referrals = false
enumerate = false

id_provider = ldap
auth_provider = <%= @auth_provider %>
chpass_provider = <%= @auth_provider %>
access_provider = ldap

<% if @directory_source == "AD" %>

ldap_uri = ldap://<%= @ad_server %>/
ldap_sasl_mech = gssapi
ldap_schema = ad
ldap_account_expire_policy = ad
ldap_user_search_base = DC=intranet,DC=epfl,DC=ch
ldap_group_search_base = OU=AppGroups,DC=intranet,DC=epfl,DC=ch???OU=UnitGroups,DC=intranet,DC=epfl,DC=ch??
ldap_force_upper_case_realm = true
ldap_use_tokengroups = false

<% else %>

ldap_uri = ldap://scoldap.epfl.ch/
ldap_schema = rfc2307
ldap_user_search_base = O=epfl,C=ch
ldap_group_search_base = O=epfl,C=ch
ldap_group_object_class = EPFLGroupOfPersons

<% end %>

ldap_access_order = expire
ldap_force_upper_case_realm = true

krb5_realm = INTRANET.EPFL.CH
krb5_server = intranet.epfl.ch

# Probably required with sssd 1.8.x and newer
krb5_canonicalize = false
<commit_msg>Straighten out account expiration policy<commit_after><%= "# This file is managed with Puppet." %>
<%-
@auth_provider = (@auth_source == "AD") ? "krb5" : "ldap"

%>


[sssd]
config_file_version = 2
domains = intranet.epfl.ch
services = nss, pam
<%= @debug_sssd ? "debug_level = 9" : "" %>

[nss]
<%= @debug_sssd ? "debug_level = 9" : "" %>

[pam]
<%= @debug_sssd ? "debug_level = 9" : "" %>

[domain/intranet.epfl.ch]
<%= @debug_sssd ? "debug_level = 9" : "" %>

ldap_referrals = false
enumerate = false

id_provider = ldap
auth_provider = <%= @auth_provider %>
chpass_provider = <%= @auth_provider %>
access_provider = ldap

<% if @directory_source == "AD" %>

ldap_uri = ldap://<%= @ad_server %>/
ldap_sasl_mech = gssapi
ldap_schema = ad
ldap_account_expire_policy = ad
ldap_user_search_base = DC=intranet,DC=epfl,DC=ch
ldap_group_search_base = OU=AppGroups,DC=intranet,DC=epfl,DC=ch???OU=UnitGroups,DC=intranet,DC=epfl,DC=ch??
ldap_force_upper_case_realm = true
ldap_use_tokengroups = false
ldap_access_order = expire
ldap_account_expire_policy = ad

<% else %>

ldap_uri = ldap://scoldap.epfl.ch/
ldap_schema = rfc2307
ldap_user_search_base = O=epfl,C=ch
ldap_group_search_base = O=epfl,C=ch
ldap_group_object_class = EPFLGroupOfPersons

<% end %>

ldap_force_upper_case_realm = true

krb5_realm = INTRANET.EPFL.CH
krb5_server = intranet.epfl.ch

# Probably required with sssd 1.8.x and newer
krb5_canonicalize = false

{'fraction_non_alphanumeric': 0.14890563329745246, 'fraction_numerical': 0.010764262648008612, 'mean_word_length': 5.669856459330144, 'pattern_counts': {'":': 0, '<': 27, '<?xml version=': 0, '>': 27, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '480160', 'n_tokens_mistral': 1247, 'n_tokens_neox': 1166, 'n_words': 198}