[sssd]
services = nss, pam
domains = example.fr
[nss]
filter_users = root
filter_groups = root
[domain/example.fr]
cache_credentials = True
id_provider = ldap
auth_provider = ldap
ldap_uri = CHANGEME
ldap_tls_reqcert = demand
ldap_search_base = CHANGEME
ldap_default_bind_dn = CHANGEME
ldap_default_authtok_type = obfuscated_password
ldap_default_authtok = AAAQAHNUVvgclMY0ywC1NekfsXqG+u754Aa/dMiRLCLKHiZ6rA8IRmukHLOU/KW6ZL3zrO8Fs+lLYZNzRmNG1aJOvDgAAQID

access_provider = permit
sudo_provider = ldap
chpass_provider = ldap
autofs_provider = ldap
resolver_provider = ldap
[pam]
offline_credentials_expiration = 1
offline_failed_login_attempts = 3