[IMP] add new work

samba-pki-tools.ini.sample

@@ -3,21 +3,26 @@
 pki_dir = /opt/pki
 
 [openssl_config]
-root_name = KG TIS
+root_name = Tranquil IT
 country = FR
 state = Pays de la Loire
 city = Saint Sebastien Sur Loire
-organization_name = KG Tranquil IT
-organization_ou = KG Tranquil IT CA
-organization_cn = KG Tranquil IT Root CA
+organization_name = Tranquil IT
+organization_ou = Tranquil IT CA
+organization_cn = Tranquil IT Root CA
 
 default_cert_duration = 730
+default_crl_duration = 90
 
-crl_uri = URI:http://crl.kg.tranquil.it/crl/root_ca.crl
+crl_uri = URI:http://crl.ad.tranquil.it/crl/tranquilit_root.crl
 
 create_intermediate = True
-intermediate_organization_cn = INFOLIX Authentication CA
-intermediate_crl_uri = URI:http://crl.infolix.lan/crl/infolix_authentication.crl
+intermediate_organization_cn = Tranquil IT Authentication CA
+intermediate_crl_uri = URI:http://crl.ad.tranquil.it/crl/tranquilit_authentication.crl
+
+# If you use Yubikey, max value is 2048 ; Nitrokey can be 4096
+default_bits_user = 2048
 
 [samba_ad]
-dc_list =
+dc_list = srvads1.ad.tranquil.it,srvads2.ad.tranquil.it
+upn_suffix = ad.tranquil.it