[domain/default]

auth_provider = ldap
sudo_provider = ldap
id_provider = ldap
chpass_provider = ldap
ldap_schema = rfc2307
ldap_search_base = ou=people,dc=domain1,dc=local
ldap_sudo_search_base = ou=SUDOers,dc=domain1,dc=local
ldap_id_use_start_tls = False
ldap_uri = ldaps://ldap1.domain1.local:636, ldaps://ldap2.domain1.local:636
entry_cache_timeout = 600
ldap_network_timeout = 3
ldap_default_bind_dn = uid=rh,ou=aplicaciones,ou=people,dc=domain1,dc=local
ldap_default_authtok_type = password
ldap_default_authtok = clave
cache_credentials = True
enumerate = True
#Si se cambia la ruta de los certificados,
# el selinux lo bloquea cuando está en enforcing
ldap_tls_cacert = /etc/openldap/cacerts/cacert_domain1.pem
ldap_tls_cert = /etc/openldap/cacerts/cert_domain1.cer
ldap_tls_key = /etc/openldap/cacerts/key1_domain1.key
ldap_sudo_full_refresh_interval = 86400
ldap_sudo_smart_refresh_interval = 900
ldap_user_object_class = posixAccount
ldap_user_name = uid
ldap_user_uid_number = uidNumber
ldap_group_search_base = ou=group,dc=domain1,dc=local
ldap_schema = rfc2307
ldap_group_member = memberUid
debug = 6