etc_sssd_sssd.conf

[domain/ipa.example.com]
override_shell=/bin/bash
cache_credentials = True
krb5_store_password_if_offline = True
ipa_domain = ipa.example.com
id_provider = ipa
auth_provider = ipa
access_provider = ipa
ldap_tls_cacert = /etc/ipa/ca.crt
ipa_hostname = client01.linux.example.com
chpass_provider = ipa
dyndns_update = True
ipa_server = _srv_, A-ipa01.ipa.example.com
dyndns_iface = ens160
dns_discovery_domain = ipa.example.com
debug_level = 5
[sssd]
services = nss, sudo, pam, ssh
config_file_version = 2
debug_level = 5
domains = ipa.example.com
[nss]
homedir_substring = /home
debug_level = 5
[pam]