# Gere par Set-OPS (role client_ldap). Ne pas editer a la main.
[sssd]
config_file_version = 2
services = nss, pam
domains = {{ client_ldap_domaine }}

[domain/{{ client_ldap_domaine }}]
id_provider = ldap
auth_provider = ldap
ldap_uri = {{ client_ldap_uri }}
ldap_search_base = {{ client_ldap_base_dn }}
{% if client_ldap_bind_dn | length > 0 %}
ldap_default_bind_dn = {{ client_ldap_bind_dn }}
ldap_default_authtok = {{ client_ldap_bind_password }}
{% endif %}
ldap_tls_reqcert = {{ client_ldap_tls_reqcert }}
cache_credentials = true
enumerate = false