gistfile1.txt

sssd <----- nsswitch (passwd, shadow, autofs)         ldap.conf
  ^                                                       |
  |--------- pam (via pas module)                         |-------- ?
  |                                                       |
  |------------<-good-<--  sudo  -->-bad->----------X-----|
 
 
 
 What is involved in getting machine auth functions through SSSD?
 
 + pam config, this comes down to a pam module being added to system-auth
 + nsswitch (Theres a module for that [TM])
 + get sssd configured and running
 
 How many Puppet Modules do we need?
 
 * Nsswitch, again, already a thing
 * Pam, not really a thing, kinda hard in light of RHEL "magical" commands
 * sssd
 
 What would an SSSD module do?
 
 % manage the package for sssd and sssd-client, allowing the version to be controlled explicitly if needed
 % manage the service, ensuring it is up and running, restarting when files change
 % manage the config file, should be only one config for sssd, has multiple sections that should be declared explicitly