[sssd] domains = LDAP services = nss, pam, sudo config_file_version = 2 [nss] filter_users = root filter_groups = root [pam] debug_level = 4 pam_pwd_expiration_warning = 10 [domain/LDAP] debug_level = 4 chpass_provider = none ldap_schema = rfc2307bis sudo_provider = none id_provider = ldap ldap_uri = ldap://xxxx:1389 ldap_search_base = ou=FEE,o=foo,c=DE ldap_group_member = uniqueMember auth_provider = krb5 krb5_server = kerb.foo.de:88 krb5_realm = FOO.DE cache_credentials = false enumerate = false