[domain/example.dc] cache_credentials = True krb5_store_password_if_offline = True ipa_domain = example.dc id_provider = ipa auth_provider = ipa access_provider = ipa ldap_tls_cacert = /etc/ipa/ca.crt ipa_hostname = ipacli-irvlt01.example.dc chpass_provider = ipa dyndns_update = True ipa_server = _srv_, ipa-irvlt01.example.dc dyndns_iface = ens160 dns_discovery_domain = example.dc debug_level = 10 [sssd] ########### AFTER IPA ################### #services = nss, sudo, pam, ssh services = nss, pam config_file_version = 2 ######################################### domains = example.dc debug_level = 10 [nss] homedir_substring = /home [pam] debug_level = 10 [sudo] [autofs] [ssh] [pac] [ifp] [secrets] [session_recording]