[sssd]
domains = DOMAIN
config_file_version = 2
services = nss, pam, ssh
certificate_verification = no_ocsp
default_domain_suffix = DOMAIN
debug_level = 10

[nss]
filter_groups = root
filter_users = root
debug_level = 10

[domain/DOMAIN]
ad_domain = DOMAIN
krb5_realm = DOMAIN
realmd_tags = manages-system joined-with-adcli 
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_sasl_authid = COMPUTER$
ldap_id_mapping = True
use_fully_qualified_names = True
fallback_homedir = /home/%u
access_provider = ad
ldap_user_certificate = userCertificate;binary
debug_level = 10
krb5_validate = False

[pam]
pam_cert_auth = True
offline_credentials_expiration = 7
p11_child_timeout = 100
debug_level = 10

[ssh]
debug_level = 10