[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3
debug_level = 5

[pam]
reconnection_retries = 3
debug_level = 5

[sssd]
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
services = nss, pam
domains = ad.automaton.uk
debug_level = 5

[domain/AD.AUTOMATON.UK]
enumerate = false
cache_credentials = true
debug_level = 5

id_provider = ldap
#added, not sure about this one.
access_provider = ldap
auth_provider = krb5
chpass_provider = krb5

ldap_uri = ldap://ad.automaton.uk
ldap_search_base = dc=ad,dc=automaton,dc=uk
ldap_tls_reqcert = never
# ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt

krb5_realm = AD.AUTOMATON.UK
dns_discovery_domain = AD.AUTOMATON.UK

ldap_schema = rfc2307bis
ldap_access_order = expire
ldap_account_expire_policy = ad
ldap_force_upper_case_realm = true
ldap_user_object_class = user
ldap_user_name = sAMAccountName
ldap_user_fullname = displayName
ldap_user_home_directory = unixHomeDirectory
ldap_user_principal = userPrincipalName
ldap_group_object_class = group
ldap_group_name = sAMAccountName
ldap_default_bind_dn = cn=aaron.jenkins,cn=Users,dc=ad,dc=automaton,dc=uk
ldap_default_authtok = dummypass1
ldap_user_search_base = dc=ad,dc=automaton,dc=uk
ldap_group_search_base = dc=ad,dc=automaton,dc=uk