[domain/subdomain.xyz.com]

cache_credentials = True
krb5_store_password_if_offline = True
krb5_realm = XYZ.com
ipa_domain = subdomain.xyz.com
id_provider = ipa
auth_provider = ipa
access_provider = ipa
ipa_hostname = <hostname>.subdomain.xyz.com
chpass_provider = ipa
ipa_dyndns_update = True
ipa_server = _srv_, ipaserver.xyz.com
ldap_tls_cacert = /etc/ipa/ca.crt
[sssd]
services = nss, sudo, pam, ssh
config_file_version = 2

domains = subdomain.xyz.com
[nss]
homedir_substring = /home

[pam]

[sudo]

[autofs]

[ssh]

[pac]

[ifp]