Fix sddm, apparmor

roles/ad_joined/templates/apparmor_cifs_homes

@@ -0,0 +1 @@
+@{HOMEDIRS}+=/home/profiles/

roles/ad_joined/templates/sssd.conf

@@ -30,8 +30,8 @@ ldap_id_mapping = True
 use_fully_qualified_names = True
 full_name_format = %1$s@%3$s
 # fallback_homedir = /home/%u@%d
-fallback_homedir = /cifs_home/%u.%F
-subdomain_homedir = /cifs_home/%u.%F
+fallback_homedir = /home/profiles/%u.%F
+subdomain_homedir = /home/profiles/%u.%F
 access_provider = ad
 krb5_ccname_template = FILE:%d/krb5cc_%U
 krb5_lifetime           =  86400

roles/fri_base/tasks/main_lin.yml

@@ -265,6 +265,12 @@
     dest: /etc/sddm.conf.d/
     src: hide_users.conf
 
+- name: Prevent sddm from enumerating all users
+  lineinfile:
+    path: /usr/share/sddm/themes/breeze/metadata.desktop
+    insertafter: EOF
+    state: present
+    line: needsFullUserModel=false
 
 - name: Copy authorized_keys
   become: false