[domain/test.org]

id_provider = ipa
ipa_server_mode = True
ipa_server = ipa.test.org
ipa_domain = test.org
ipa_hostname = ipa.test.org
auth_provider = ipa
chpass_provider = ipa
access_provider = ipa
cache_credentials = True
ldap_tls_cacert = /etc/ipa/ca.crt
ldap_group_nesting_level = 8  # added by me
krb5_store_password_if_offline = True
sudo_provider = ipa
autofs_provider = ipa
subdomains_provider = ipa
session_provider = ipa
hostid_provider = ipa
[sssd]
services = nss, pam, ifp, ssh, sudo

domains = test.org
[nss]
homedir_substring = /home
memcache_timeout = 600

[pam]

[sudo]

[autofs]

[ssh]

[pac]

[ifp]
allowed_uids = ipaapi, root

[secrets]

[session_recording]