1. config_file_version = 2
2. services = nss, pam
3.  
4. # Managed by system facility command:
5. ## control sssd-drop-privileges unprivileged|privileged|default
6. user = _sssd
7. domains = domain.local
8.  
9. # SSSD will not start if you do not configure any domains.
10.  
11. [nss]
12.  
13. [pam]
14.  
15. [domain/domain.local]
16. default_shell = /bin/bash
17. krb5_store_password_if_offline = True
18. cache_credentials = True
19. krb5_realm = domain.local
20. realmd_tags = manages-system joined-with-adcli
21. id_provider = ad
22. fallback_homedir = /home/%u@%d
23. ad_domain = domain.local
24. use_fully_qualified_names = True
25. ldap_id_mapping = True
26. access_provider = ad
27. ad_site = controller.domain.local
28. ad_gpo_ignore_unreadable = True
29. ad_gpo_map_network = +nx
30.