sssd_ldap.pp

class profile::sssd_ldap (
  $ldap_account,
  $ldap_password = hiera('profile::sssd_ldap::ldap_password'),
  ) {

    class { 'sssd':
      ldap_base          => 'STRING_CUT',
      ldap_uri           => 'STRING_CUT',
      ldap_pwd_policy    => 'STRING_CUT',
      ldap_group_member  => 'STRING_CUT',
      ldap_access_filter => 'STRING_CUT',
      ldap_schema        => 'STRING_CUT',
    }

    Ini_setting {
      ensure  => present,
      path    => '/etc/sssd/sssd.conf',
      section => 'domain/LDAP',
      require => Class['sssd::config'],
      notify  => Class['sssd::service'],
    }

    ini_setting { 'ldap_group_object_class':
      setting => 'ldap_group_object_class',
      value   => 'departmentNumber',
    }

    ini_setting { 'ldap_default_bind_dn':
      setting => 'ldap_default_bind_dn',
      value   => "STRING_CUT",
    }

    ini_setting { 'ldap_default_authtok':
      setting => 'ldap_default_authtok',
      value   => $ldap_password,
    }


}