# {{ ansible_managed }}
[sssd]
services = nss, pam
domains = {{ ad_domain }}

[domain/{{ ad_domain }}]
id_provider = ad
access_provider = simple
simple_allow_groups = {{ ad_admin_group }}, {{ ad_operator_group }}
auth_provider = ad
chpass_provider = ad

ad_domain = {{ ad_domain }}
krb5_realm = {{ ad_domain_realm }}

use_fully_qualified_names = {{ sssd_use_fully_qualified_names | lower }}
fallback_homedir = /home/%d/%u
default_shell = /bin/bash

cache_credentials = true
enumerate = false

ldap_id_mapping = true