23.5.14

sssd autofs with ad backend

A working autofs sssd 1.9.6 doesn't translate to the new ad backend. Here is the minimum we found to get it going. Tested with sssd 1.11.5.1

Here we have a client catral.hh3.site joined to the AD domain hh3.site with the DC at hh16.hh3.site

[sssd]

services = nss, pam, autofs
config_file_version = 2
domains = default
[nss]
[pam]
[autofs]
[domain/default]
ad_hostname = catral.hh3.site
ad_server = hh16.hh3.site
ad_domain = hh3.site
ldap_schema = ad
id_provider = ad
access_provider = ad
auth_provider = ad
chpass_provider = ad
ldap_id_mapping=false

ldap_sasl_mech = gssapi

ldap_sasl_authid = CATRAL$@HH3.SITE
krb5_keytab = /etc/krb5.keytab
ldap_krb5_init_creds = true

autofs_provider=ldap

autofs_search_base = OU=automount,DC=hh3,DC=site
ldap_autofs_map_object_class = automountMap
ldap_autofs_entry_object_class = automount
ldap_autofs_map_name = automountMapName
ldap_autofs_entry_key = automountKey
ldap_autofs_entry_value = automountInformation

Don't forget: you'll need cifs-utils