On 08/10/2015 12:56 AM, Caleb wrote:
    [sssd]
    debug_level = 0x4000
    config_file_version = 2
    services = nss,pam
    domains = FOO

    [nss]
    debug_level = 0xFFF0
    filter_users = root
    filter_groups = root

    [pam]

    [domains/FOO]
please replace with "[domain/FOO]"
    debug_level = 0xFFF0
    auth_provider = krb5
    krb5_server = kdc.redacted.com
    krb5_realm = REDACTED
    cache_credentials = true

    access_provider = simple
    chpass_provider = krb5

    id_provider = ldap
    ldap_uri = ldap://ldap.redacted.com
    ldap_search_base = dc=redacted,dc=com
    ldap_id_use_start_tls = true
    ldap_sasl_mech = GSSAPI

    sudo_provider = none