[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3
[pam]
reconnection_retries = 3
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = dorsz.kjonca


[domain/dorsz.kjonca]
ldap_default_bind_dn = kjonca@dorsz.kjonca
ldap_default_authtok = Virtualbox1
ldap_id_use_start_tls = False
debug=9
enumerate = true
cache_credentials = true
id_provider = ldap
access_provider = simple
simple_allow_groups = Domain Admins
auth_provider = ldap

ldap_uri = ldap://192.168.57.10:3268
ldap_search_base = dc=dorsz,dc=kjonca
ldap_tls_reqcert = never

ldap_schema = ad
ldap_id_mapping = True
ldap_access_order = expire
ldap_account_expire_policy = ad
ldap_force_upper_case_realm = true

ldap_user_search_base = dc=dorsz,dc=kjonca
ldap_group_search_base = dc=dorsz,dc=kjonca
ldap_user_object_class = user
ldap_user_name = sAMAccountName
ldap_user_fullname = displayName

ldap_group_object_class = group
ldap_group_name = sAMAccountName
override_homedir = /home/%u
override_shell = /bin/bash
#Bind credentials