# Gere par Set-OPS (role clients_ldap). Ne pas editer a la main.
[sssd]
config_file_version = 2
services = nss, pam
domains = {{ clients_ldap_domaine }}

[domain/{{ clients_ldap_domaine }}]
id_provider = ldap
auth_provider = ldap
ldap_uri = {{ clients_ldap_uri }}
ldap_search_base = {{ clients_ldap_base_dn }}
{% if clients_ldap_bind_dn | length > 0 %}
ldap_default_bind_dn = {{ clients_ldap_bind_dn }}
ldap_default_authtok = {{ clients_ldap_bind_password }}
{% endif %}
ldap_tls_reqcert = {{ clients_ldap_tls_reqcert }}
cache_credentials = true
enumerate = false