# -*-conf-unix-*-

pam_allowed_login_groups = {{ allowed_groups }}
default_shell = "/bin/bash"
home_attr = "uuid"
home_alias = "name"
use_etc_skel = true
# Just use name for usernames, it shouldn't be too hard to keep track of
uid_attr_map = "name"
# Use the SPN for groups, so we can easily tell which are local and which are remote
gid_attr_map = "spn"