Here's the config. I had to sanitize it.
[sssd]
config_file_version = 2
services = nss, pam
domains = domain1
[nss]
filter_groups = root
filter_users = root
[pam]
pam_verbosity = 3
[domain/domain1]
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
ldap_schema = rfc2307
ldap_uri =
ldaps://ldap1.domain1.com,ldaps://ldap2.domain1.com
ldap_chpass_uri =
ldaps://ldap1.domain1.com
ldap_search_base = dc=domain1:
enumerate = false
cache_credentials = false
ldap_tls_reqcert = hard
min_id = 1000
debug_level=9
Logs here. I just grabbed the logs for the period during the login, not the sssd startup.
http://pastebin.com/1hCx2UK3
Thanks!