Wesley van TilburgandClaude Opus 5.5
0e76505715
Build containers / fedora-cosmic (44) (pull_request) Canceled after 0s
Build containers / fedora-cosmic (rawhide) (pull_request) Canceled after 0s
Build containers / fedora-remote (44) (pull_request) Canceled after 0s
Build containers / fedora-intune (44) (pull_request) Canceled after 0s
Build containers / Compute changes (pull_request) Canceled after 12s
Build containers / Prune old releases and tags (pull_request) Skipped
local_sudo_group was set to wheel but sudo_groups was empty, so no Entra user ever got sudo. Members of the Entra group c3b1cfcc-7834-47eb-948b-a22204276453 now get wheel at sign-in, and lose it again after leaving the group. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
21 lines
872 B
Plaintext
21 lines
872 B
Plaintext
# Himmelblau configuration. See himmelblau.conf(5) and
|
|
# https://himmelblau-idm.org/docs/reference/himmelblau-conf/
|
|
#
|
|
# No tenant settings are needed: `domain` defaults to the domain of the first
|
|
# user who signs in, and that user joins the device to Entra ID. Restrict who
|
|
# may sign in with pam_allow_groups (group object IDs or UPNs).
|
|
|
|
[global]
|
|
# Enroll the device in Intune and apply/report compliance policies.
|
|
apply_policy = true
|
|
# Fedora's admin group; members of sudo_groups (Entra group object IDs) are
|
|
# added to it.
|
|
local_sudo_group = wheel
|
|
# Linux admins: members get wheel (sudo) at sign-in, and lose it again within
|
|
# local_groups_reconcile_interval after leaving the group.
|
|
sudo_groups = c3b1cfcc-7834-47eb-948b-a22204276453
|
|
# Home directories named after the account (e.g. /home/jdoe), with a UPN alias.
|
|
home_attr = CN
|
|
home_alias = SPN
|
|
use_etc_skel = true
|