<commit_before># sssd.conf managed by puppet
[sssd]
config_file_version = 2
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>
services = nss, pam
domains = <%= @ad_domains.keys.flatten.join(',') %>

[nss]
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>
filter_groups = root
filter_users = root
<% if @override_homedir -%>
override_homedir = <%= @override_homedir %>
<% end -%>

[pam]
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>

<% ad_domains.each_pair do |ad_domain, val| -%>
[domain/<%= ad_domain %>]
description = LDAP domain with AD server
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>
<% if val.has_key?('cache_credentials') -%>
cache_credentials = <%= val['cache_credentials'] %>
<% end -%>
# AD is case insensitive
case_sensitive = false
<% if val.has_key?('enumerate') -%>
# Might cause excessive load on AD servers, keep an eye on this
enumerate = <%= val['enumerate'] %>
<% end -%>
<% if val.has_key?('min_id') -%>
min_id = <%= val['min_id'] %>
<% end -%>
id_provider = ldap
auth_provider = krb5
chpass_provider = krb5
access_provider = ldap
krb5_realm = <%= ad_domain %>
<% if val.has_key?('krb5_servers') -%>
krb5_server = <%= val['krb5_servers'].flatten.join(',') %>
<% end -%>
<% if val.has_key?('krb5_kpasswd') -%>
krb5_kpasswd = <%= val['krb5_kpasswd'] %>
<% end -%>
krb5_validate = true
krb5_renew_interval = 6000
krb5_renewable_lifetime = 36000
krb5_use_enterprise_principal = true
########## BUG WORKAROUND ################
krb5_canonicalize = false
##########################################
ldap_sasl_mech = GSSAPI
<% if val.has_key?('ldap_search_base') -%>
ldap_search_base = <%= val['ldap_search_base'] %>
<% end -%>
<% if val.has_key?('ldap_user_search_base') -%>
ldap_user_search_base = <%= val['ldap_user_search_base'] %>
<% end -%>
<% if val.has_key?('ldap_user_search_scope') -%>
ldap_user_search_scope = <%= val['ldap_user_search_scope'] %>
<% end -%>
ldap_user_object_class = user
ldap_user_name = sAMAccountName
ldap_user_home_directory = unixHomeDirectory
# https://fedorahosted.org/sssd/ticket/1749
ldap_user_principal = sAMAccountName
ldap_group_object_class = group
<% if val.has_key?('ldap_group_name') -%>
ldap_group_name = <% val['ldap_group_name'] %>
<% end -%>
<% if val.has_key?('ldap_schema') -%>
ldap_schema = <%= val['ldap_schema'] %>
<% else -%>
ldap_schema = rfc2307bis
<% end -%>
<% if val.has_key?('ldap_uris') -%>
ldap_uri = <%= val['ldap_uris'].flatten.join(',') %>
<% end -%>
ldap_force_upper_case_realm = true
ldap_referrals = false
ldap_sasl_canonicalize = true
ldap_access_order = expire
ldap_account_expire_policy = ad
ldap_pwd_policy = mit_kerberos
<% end -%>
<commit_msg>Yet one more typo fix<commit_after># sssd.conf managed by puppet
[sssd]
config_file_version = 2
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>
services = nss, pam
domains = <%= @ad_domains.keys.flatten.join(',') %>

[nss]
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>
filter_groups = root
filter_users = root
<% if @override_homedir -%>
override_homedir = <%= @override_homedir %>
<% end -%>

[pam]
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>

<% ad_domains.each_pair do |ad_domain, val| -%>
[domain/<%= ad_domain %>]
description = LDAP domain with AD server
<% if @debug_level -%>
debug_level = <%= @debug_level %>
<% end -%>
<% if val.has_key?('cache_credentials') -%>
cache_credentials = <%= val['cache_credentials'] %>
<% end -%>
# AD is case insensitive
case_sensitive = false
<% if val.has_key?('enumerate') -%>
# Might cause excessive load on AD servers, keep an eye on this
enumerate = <%= val['enumerate'] %>
<% end -%>
<% if val.has_key?('min_id') -%>
min_id = <%= val['min_id'] %>
<% end -%>
id_provider = ldap
auth_provider = krb5
chpass_provider = krb5
access_provider = ldap
krb5_realm = <%= ad_domain %>
<% if val.has_key?('krb5_servers') -%>
krb5_server = <%= val['krb5_servers'].flatten.join(',') %>
<% end -%>
<% if val.has_key?('krb5_kpasswd') -%>
krb5_kpasswd = <%= val['krb5_kpasswd'] %>
<% end -%>
krb5_validate = true
krb5_renew_interval = 6000
krb5_renewable_lifetime = 36000
krb5_use_enterprise_principal = true
########## BUG WORKAROUND ################
krb5_canonicalize = false
##########################################
ldap_sasl_mech = GSSAPI
<% if val.has_key?('ldap_search_base') -%>
ldap_search_base = <%= val['ldap_search_base'] %>
<% end -%>
<% if val.has_key?('ldap_user_search_base') -%>
ldap_user_search_base = <%= val['ldap_user_search_base'] %>
<% end -%>
<% if val.has_key?('ldap_user_search_scope') -%>
ldap_user_search_scope = <%= val['ldap_user_search_scope'] %>
<% end -%>
ldap_user_object_class = user
ldap_user_name = sAMAccountName
ldap_user_home_directory = unixHomeDirectory
# https://fedorahosted.org/sssd/ticket/1749
ldap_user_principal = sAMAccountName
ldap_group_object_class = group
<% if val.has_key?('ldap_group_name') -%>
ldap_group_name = <%= val['ldap_group_name'] %>
<% end -%>
<% if val.has_key?('ldap_schema') -%>
ldap_schema = <%= val['ldap_schema'] %>
<% else -%>
ldap_schema = rfc2307bis
<% end -%>
<% if val.has_key?('ldap_uris') -%>
ldap_uri = <%= val['ldap_uris'].flatten.join(',') %>
<% end -%>
ldap_force_upper_case_realm = true
ldap_referrals = false
ldap_sasl_canonicalize = true
ldap_access_order = expire
ldap_account_expire_policy = ad
ldap_pwd_policy = mit_kerberos
<% end -%>

{'fraction_non_alphanumeric': 0.2048591938155715, 'fraction_numerical': 0.011779863795324867, 'mean_word_length': 5.683886838868388, 'pattern_counts': {'":': 0, '<': 111, '<?xml version=': 0, '>': 111, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '480161', 'n_tokens_mistral': 2396, 'n_tokens_neox': 2156, 'n_words': 364}