[sssd] services = nss, pam config_file_version = 2 domains = AD.{{ esmith.DomainName|upper }} # default_domain_suffix = {{ esmith.DomainName }} [domain/AD.{{ esmith.DomainName|upper }}] id_provider = ad access_provider = ad override_homedir = /var/lib/nethserver/home/%u enumerate = true ad_gpo_access_control = disabled ad_domain = ad.{{ esmith.DomainName }} krb5_realm = ad.{{ esmith.DomainName }} ldap_id_mapping = True ad_maximum_machine_account_password_age = 0 ad_server = nsdc-{{ esmith.SystemName }}.ad.{{ esmith.DomainName }} cache_credentials = True realmd_tags = manages-system joined-with-samba #[nss] #filter_users = ldapservice