[nss]
debug_level = 10
filter_groups = root
filter_users = root

[sssd]
debug_level = 10

domains = a.c.domain
config_file_version = 2
services = nss,pam,ssh,pac

[pac]

[pam]
pam_verbosity = 3
debug_level = 0xfff0
#pam_id_timeout = 40


[domain/a.c.domain]
debug_level = 9
#ldap_purge_cache_timeout = 0
ldap_use_tokengroup = false
ignore_group_members = true
ldap_group_nesting_level = 0

dyndns_update = true
dyndns_update_ptr = true
dyndns_server = sss-vdc0f.c.domain


id_provider = ad
access_provider = ad
auth_provider = ad

krb5_realm = A.C.DOMAIN
krb5_use_fast = try
krb5_canonicalize = true
ad_domain = a.c.domain
ad_site = SDU
ad_hostname = lnx-adm557.a.c.domain

krb5_confd_path = /var/lib/sss/pubconf/krb5.include.d

###
use_fully_qualified_names = true
#use_fully_qualified_names = false
ldap_id_mapping = true
ldap_user_principal = userPrincipalName
krb5_lifetime = 10h
krb5_renewable_lifetime = 7d
krb5_renew_interval = 1h
ad_gpo_access_control = permissive
#ad_gpo_map_interactive = +lightdm
#ad_gpo_map_permit = systemd-user 
#ad_gpo_default_right = permit
pam_public_domains = all
selinux_provider = none
cached_auth_timeout = 10

###

