[sssd] domains = domain.test config_file_version = 2 services = nss, pam debug_level = 10 [domain/domain.test] debug_level = 10 # ad_domain = domain.test krb5_realm = DOMAIN.TEST realmd_tags = manages-system joined-with-adcli access_provider = ad auth_provider = ad id_provider = ad ldap_id_mapping = True # # cache_credentials = True # krb5_store_password_if_offline = True # use_fully_qualified_names = False default_shell = /bin/bash fallback_homedir = /home/%u@%d # ldap_sasl_authid = RUDI-VIRTUAL-MA$ [pam] debug_level = 10 pam_cert_auth = True