[sssd] config_file_version = 2 services = nss, pam domains = LDAP [nss] filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd,demo [pam] [domain/LDAP] filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd,demo id_provider = ldap auth_provider = ldap ldap_tls_reqcert = demand ldap_tls_cacert = %CACERT% ldap_schema = rfc2307 ldap_uri = %URI% ldap_search_base = %SEARCHBASE% cache_credentials = true