[sssd] debug_level = 0xFFFF config_file_version = 2 domains = ad.domain.com services = nss, pam [nss] debug_level = 0xFFFF fallback_homedir = /home/%d/%u default_shell = /bin/bash filter_users = root filter_groups = root [pam] debug_level = 0xFFFF [domain/ad.domain.com] debug_level = 0xFFFF id_provider = ad access_provider = ad auth_provider = ad chpass_provider = ad cache_credentials = true krb5_realm = AD.DOMAIN.COM #GPO access controls ad_gpo_access_control = enforcing