# SSSD configuration generated using /usr/lib/sssd/generate-config [sssd] config_file_version = 2 reconnection_retries = 3 sbus_timeout = 30 services = nss, pam domains = office #debug_level = 10 [nss] filter_groups = root filter_users = root reconnection_retries = 3 [pam] reconnection_retries = 3 offline_credentials_expirations = 0 [domain/office] ; Using enumerate = true leads to high load and slow response enumerate = true cache_credentials = true id_provider = ldap auth_provider = ldap chpass_provider = ldap ldap_uri = ldap://ldap.office ldap_search_base = dc=ldap,dc=office ldap_tls_reqcert = demand ldap_tls_cacert = /etc/ssl/certs/CA.pem ldap_user_search_base = cn=users,dc=ldap,dc=office ldap_group_search_base = cn=groups,dc=ldap,dc=office entry_cache_timeout = 1