[sssd] config_file_version = 2 services = nss, pam domains = LDAP [nss] [pam] [domain/LDAP] id_provider = ldap auth_provider = ldap ldap_uri = ldap://ldap.mngt.bh.helux.nl/ ldap_search_base = dc=helux,dc=nl ldap_id_use_start_tls = true ldap_tls_cacert = /usr/local/share/ca-certificates/cacert.crt cache_credentials = true enumerate = true