sssd.conf revision 19ce0003e32cde587e2e2115f431e86e0c9adf76
[sssd]
# Number of times services should attempt to reconnect in the
# event of a crash or restart before they give up
# If a back end is particularly slow you can raise this timeout here
sbus_timeout = 30
# SSSD will not start if you do not configure any domains.
# Add new domain configurations as [domain/<NAME>] sections, and
# then add the list of domains (in the order you want them to be
# queried) to the "domains" attribute below and uncomment it.
[nss]
# all domains (you can add here a comma-separated list of system accounts that
# The entry_cache_timeout indicates the number of seconds to retain an
# entry in cache before it is considered stale and must block to refresh.
# The entry_cache_nowait_timeout indicates the number of seconds to
# wait before updating the cache out-of-band. (NSS requests will still
# be returned from cache until the full entry_cache_timeout). Setting this
# value to 0 turns this feature off (default).
; entry_cache_timeout = 600
; entry_cache_nowait_timeout = 300
[pam]
# Example domain configurations
# Note that enabling enumeration in the following configurations will have a
# moderate performance impact while enumerations are actually running, and
# may increase the time necessary to detect network disconnection.
# Consequently, the default value for enumeration is FALSE.
# Refer to the sssd.conf man page for full details.
# Example LOCAL domain that stores all users natively in the SSSD internal
# now contains only root and system accounts.
; id_provider = local
; enumerate = true
; min_id = 500
; max_id = 999
# Example native LDAP domain
# ldap_schema can be set to "rfc2307", which uses the "memberuid" attribute
# for group membership, or to "rfc2307bis", which uses the "member" attribute
# to denote group membership. Changes to this setting affect only how we
# determine the groups a user belongs to and will have no negative effect on
# data about the user itself. If you do not know this value, ask an
# administrator.
; id_provider = ldap
; auth_provider = ldap
; ldap_schema = rfc2307
; cache_credentials = true
# Example LDAP domain where the LDAP server is an Active Directory server.
; enumerate = false
; min_id = 1000
;
; id_provider = ldap
; auth_provider = ldap