[domain/default] ldap_id_use_start_tls = True id_provider = ldap autofs_provider = ldap auth_provider = krb5 chpass_provider = krb5 ldap_search_base = dc=com ldap_tls_cacertdir = /etc/openldap/cacerts cache_credentials = True krb5_store_password_if_offline = True ldap_tls_reqcert = demand [sssd] services = nss, autofs domains = default [nss] homedir_substring = /home [pam] [sudo] [autofs] [ssh] [pac] [ifp] [secrets]