[domain/ipa.example.com] id_provider = ipa dns_discovery_domain = ipa.example.com ipa_server = _srv_, entl01.ipa.example.com ipa_domain = ipa.example.com ipa_hostname = diurne.example.com auth_provider = ipa chpass_provider = ipa access_provider = ipa cache_credentials = True ldap_tls_cacert = /etc/ipa/ca.crt krb5_store_password_if_offline = True full_name_format = %1$s [sssd] services = nss, sudo, pam, ssh domains = ipa.example.com [nss] homedir_substring = /home [pam] [sudo] [autofs] [ssh] [pac] [ifp] [secrets]