[sssd] services = nss, pam domains = example.fr [nss] filter_users = root filter_groups = root [domain/example.fr] cache_credentials = True id_provider = ldap auth_provider = ldap ldap_uri = ldaps://ldx1.formation.opendoor.fr ldap_tls_reqcert = demand ldap_search_base = dc=example,dc=fr ldap_default_bind_dn = uid=sssd,ou=services,dc=example,dc=fr ldap_default_authtok_type = obfuscated_password ldap_default_authtok = AAAQAHNUVvgclMY0ywC1NekfsXqG+u754Aa/dMiRLCLKHiZ6rA8IRmukHLOU/KW6ZL3zrO8Fs+lLYZNzRmNG1aJOvDgAAQID access_provider = permit sudo_provider = ldap chpass_provider = ldap autofs_provider = ldap resolver_provider = ldap [pam] offline_credentials_expiration = 1 offline_failed_login_attempts = 3 offline_failed_login_delay = 5