[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = intern

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3

[domain/intern]
; Using enumerate = true leads to high load and slow response
enumerate = false
cache_credentials = true

id_provider = ldap
auth_provider = krb5
chpass_provider = krb5

ldap_uri = ldap://ldap
ldap_search_base = dc=intern
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/ldap/slapd.crt

krb5_kdcip = kerberos
krb5_realm = INTERN
krb5_changepw_principle = kadmin/changepw
krb5_auth_timeout = 15
