It works! Thanks for the tip, I'd missed that completely.

On Mon, Aug 10, 2015 at 1:44 AM, Pavel Reichl <preichl@redhat.com> wrote:

On 08/10/2015 12:56 AM, Caleb wrote:
    [sssd]
    debug_level = 0x4000
    config_file_version = 2
    services = nss,pam
    domains = FOO

    [nss]
    debug_level = 0xFFF0
    filter_users = root
    filter_groups = root

    [pam]

    [domains/FOO]
please replace with "[domain/FOO]"
    debug_level = 0xFFF0
    auth_provider = krb5
    krb5_server = kdc.redacted.com
    krb5_realm = REDACTED
    cache_credentials = true

    access_provider = simple
    chpass_provider = krb5

    id_provider = ldap
    ldap_uri = ldap://ldap.redacted.com
    ldap_search_base = dc=redacted,dc=com
    ldap_id_use_start_tls = true
    ldap_sasl_mech = GSSAPI

    sudo_provider = none


_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users