bundle agent krb5client
{
# Configure KRB5 client

files:

  debian.!standalone.installation::

    "/usr/share/pam-configs/edu-nopwdchange"
      link_from => ln_s("/usr/share/debian-edu-config/pam-config-nopwdchange"),
      move_obstructions => "true";

commands:

  # On the main server, krb5.conf is generated using tools/kerberos-kdc-init,
  # on a roaming workstation using tools/setup-roaming; see cf.ldapserver
  # and cf.ldapclient resp.

  debian.!standalone.!roaming.!server.installation::

    "/usr/share/debian-edu-config/tools/sssd-generate-config -k > /etc/krb5.conf"
      contain => in_shell;
}