[sssd] domains = ad.holding.com config_file_version = 2 services = nss, pam default_domain_suffix = ad.holding.com [domain/ad.holding.com] ad_server = kom-dc01.ad.holding.com, kom-dc02.ad.holding.com ad_backup_server = prm-dc01.ad.holding.com, msk-dc01.ad.holding.com ad_domain = ad.holding.com krb5_realm = AD.HOLDING.COM realmd_tags = manages-system joined-with-adcli #cache_credentials = True id_provider = ad #krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = True fallback_homedir = /home/%d/%u access_provider = simple #debug_level=9 subdomains_provider = none ldap_idmap_default_domain_sid = S-1-5-21-2599488624-3617735854-14887588928 simple_allow_groups = KOM-SRV-Linux-Admins@ad.holding.com