fixing sssd ldap auth with centos7

tasks/centos.yml

@@ -77,7 +77,7 @@
 
 - name: generate ldap.conf for Centos
   template:
-    src: ldap.conf
+    src: centos_ldap.conf
     dest: /etc/openldap/ldap.conf
     owner: root
     group: root
@@ -92,4 +92,4 @@
   shell: authconfig --enablemkhomedir --update
 
 - name: join Ldap Centos
-  shell: authconfig --kickstart --enableshadow --enablemd5 --passalgo=sha512 --enableldap --ldapserver=ldap.epfl.ch --ldapbasedn=o=epfl,c=ch --enableldapauth --enableforcelegacy --enableldaptls --disablefingerprint --updateall
+  shell: authconfig --enablesssdauth --enablesssd --updateall

templates/centos_ldap.conf

+#
+# LDAP Defaults
+#
+
+# See ldap.conf(5) for details
+# This file should be world readable but not world writable.
+
+BASE      o=epfl,c=ch
+URI       ldap://scoldap.epfl.ch
+
+#SIZELIMIT	12
+#TIMELIMIT	15
+#DEREF		never
+
+# TLS certificates (needed for GnuTLS)
+TLS_CACERT      /etc/openldap/cacerts/digicert.pem
\ No newline at end of file