[root@va-prod-ipa01 ~]# cat /etc/sssd/sssd.conf [domain/ipa.splat.acme.com] cache_credentials = True krb5_store_password_if_offline = True ipa_domain = ipa.splat.acme.com id_provider = ipa auth_provider = ipa access_provider = ipa ipa_hostname = va-prod-ipa01.ipa.splat.acme.com chpass_provider = ipa ipa_server = va-prod-ipa01.ipa.splat.acme.com ipa_server_mode = True ldap_tls_cacert = /etc/ipa/ca.crt krb5_auth_timeout = 30 #debug_level = 9 ldap_search_timeout = 30 [sssd] services = sudo, nss, ifp, pam, ssh domains = ipa.splat.acme.com [nss] memcache_timeout = 600 homedir_substring = /home [pam] [sudo] [autofs] [ssh] [pac] [ifp] [secrets] [session_recording] [root@va-prod-ipa01 ~]#