[sssd] config_file_version = 2 services = nss, pam, sudo domains = LDAP [nss] entry_negative_timeout = 20 [pam] offline_credentials_expiration = 3 [domain/LDAP] cache_credentials = true enumerate = true id_provider = ldap auth_provider = ldap sudo_provider = ldap chpass_provider = ldap ldap_uri = ldaps://ldap.konchin.com ldap_search_base = dc=konchin,dc=com ldap_sudo_search_base = ou=SUDOers,dc=konchin,dc=com entry_cache_timeout = 3600 entry_cache_netgroup_timeout = 0 entry_cache_user_timeout = 600 entry_cache_group_timeout = 3600 ldap_search_timeout = 50 ldap_network_timeout = 60