From 708580552bdb7a20cdbcf9ac47f9c9bf63c1818c Mon Sep 17 00:00:00 2001
From: Thomas Schneider <thomas@fsmpi.rwth-aachen.de>
Date: Mon, 12 Jun 2023 18:44:48 +0200
Subject: [PATCH] ad-auth: sssd: Allow forcing a particular DC
---
ad-auth/templates/sssd.conf.j2 | 3 +++
1 file changed, 3 insertions(+)
diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index f204293..7787671 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -32,3 +32,6 @@ ad_gpo_access_control = disabled
ldap_search_base = {{ authbase }}?subtree?(&(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
{% endif %}
dyndns_update=false
+{% if ad_auth_renew_force_dc is defined %}
+ad_server = {{ ad_auth_renew_force_dc }}
+{% endif %}
--
GitLab