[adclient.sls]
sssd:
  pkg.installed: []

samba:
  pkg.installed: []

enable_sssd_service:
  service.running:
    - name: sssd
    - restart: true
    - watch:
      - file: /etc/sssd/sssd.conf

/etc/sssd/sssd.conf:
  file.managed:
    - source: salt://sssd.conf
    - mode: 0600

/etc/nsswitch.conf:
  file.managed:
    - source: salt://nsswitch.conf
    - mode: 0644

/etc/sudoers.d/serveradmins:
  file.managed:
    - contents: '%ServerAdmins ALL=(ALL) ALL'
    - mode: 0644

/etc/krb5.conf:
  file.managed:
    - source: salt://krb5.conf
    - mode: 0644

/etc/samba/smb.conf:
  file.managed:
    - source: salt://samba.conf
    - mode: 0644

/etc/pam.d/system-auth:
  file.managed:
    - source: salt://system-auth
    - mode: 0644

/etc/pam.d/passwd:
  file.managed:
    - source: salt://passwd
    - mode: 0644