# SSSD configuration generated using /usr/share/sssd/generate-config
[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = bigon.be

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[pam]
reconnection_retries = 3

[domain/bigon.be]
; Using enumerate = true leads to high load and slow response
enumerate = false
cache_credentials = true

id_provider = ldap
auth_provider = krb5
chpass_provider = krb5

ldap_uri = ldap://bigon-e80ef7e8e.bigon.be
ldap_search_base = DC=bigon,DC=be
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt

krb5_kdcip = bigon-e80ef7e8e.bigon.be
krb5_realm = BIGON.BE
krb5_changepw_principle = kadmin/changepw
krb5_auth_timeout = 15