all demo

ansible/playbook/roles/ldap-auth/files/nsswitch.conf.Debian

@@ -0,0 +1,14 @@
+passwd:         compat ldap
+group:          compat ldap
+shadow:         compat ldap
+gshadow:        files
+
+hosts:          files dns
+networks:       files
+
+protocols:      db files
+services:       db files
+ethers:         db files
+rpc:            db files
+
+netgroup:       nis ldap

ansible/playbook/roles/ldap-auth/files/nsswitch.conf.RedHat

@@ -0,0 +1,23 @@
+passwd:     files sss ldap
+shadow:     files sss ldap
+group:      files sss ldap
+#initgroups: files
+
+#hosts:     db files nisplus nis dns
+hosts:      files dns
+
+bootparams: nisplus [NOTFOUND=return] files
+
+ethers:     files
+netmasks:   files
+networks:   files
+protocols:  files
+rpc:        files
+services:   files sss
+
+netgroup:   files sss
+
+publickey:  nisplus
+
+automount:  files
+aliases:    files nisplus

ansible/playbook/roles/ldap-auth/files/sudoers

@@ -0,0 +1,7 @@
+Defaults	env_reset
+Defaults	mail_badpass
+Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
+root	ALL=(ALL:ALL) ALL
+%sudo  ALL=(ALL:ALL) NOPASSWD: ALL
+%<some_group>       ALL=(ALL)       NOPASSWD: ALL
+administrator       ALL=(root)                                        NOPASSWD: /bin/systemctl * dev_branch*_hornetq*