#!/bin/bash
# This is a helper script for realmd
set -xefu

# $1: "winbind" or "sssd"
authselect select "$1" with-mkhomedir with-libnss-role --force

# libnss-role
cat > /etc/role << 'EOF'
Domain Users:users,cdrom,cdwriter,scanner,audio,video,floppy
Domain Admins:wheel
EOF
