Allow to override shell attribute

CHANGELOG.md

@@ -1,4 +1,9 @@
 
+## v1.2.1
+
+### Enhancement
+* Allow to override shell attribute.
+
 ## v1.2
 
 ### Enhancement

README.md

@@ -23,6 +23,8 @@ Highly inspired by [Lae's system_ldap role][lae sssd galaxy] with minors updates
 * **sssd_main_conf_tpl** : Template used to generate the previous config file [default : `etc/sssd/sssd.conf.j2`].
 * **sssd_mkhomedir** : If home directories should be created at login [default : `true`].
 * **sssd_home_path** : Path where home directories are stored [default : `/home`].
+* **sssd_shell** : Path to the default shell to use [default : `/bin/bash`].
+* **sssd_shell_override** : If shell should be override with the previous value [default : `False`].
 * **sssd_sudoers_ldap** : If sudo must look to `sss` the list of sudoers [default : `false`].
 * **sssd_nsswitch_manage** : If nsswitch should be managed by the role [default : `false`].
 * **sssd_service_name** : SSSD's service name [default : `sssd`].

defaults/main.yml

@@ -9,6 +9,8 @@ sssd_main_conf_path: '/etc/sssd/sssd.conf'
 sssd_main_conf_tpl: 'etc/sssd/sssd.conf.j2'
 sssd_mkhomedir: true
 sssd_home_path: '/home'
+sssd_shell: '/bin/bash'
+sssd_shell_override: False
 
 sssd_sudoers_ldap: false
 

templates/etc/sssd/sssd.conf.j2

@@ -34,6 +34,9 @@ entry_cache_timeout = 5400
 
 {# mapping/attribute configuration #}
 override_homedir = {{ sssd_home_path }}/%u
+{% if sssd_shell_override %}
+override_shell = {{ sssd_shell }}
+{% endif %}
 
 krb5_realm = #
 

vars/debian.yml

@@ -2,6 +2,6 @@
 # vars file for Debian-based distros
 sssd_pkg_list:
   - ca-certificates
-  - sssd
   - libpam-sss
   - libnss-sss
+  - sssd