[domain/mydomain.tld]

cache_credentials = true
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
access_provider = simple
ldap_tls_cacert = /etc/ssl/certs/mydomain.tld.crt
enumerate = false
ldap_tls_reqcert = demand

ldap_uri = ldap://ipa.mydomain.tld
ldap_search_base = cn=accounts,dc=mydomain,dc=tld
ldap_schema = rfc2307bis
ldap_user_search_base = cn=users,cn=accounts,dc=mydomain,dc=tld
ldap_group_search_base = cn=groups,cn=accounts,dc=mydomain,dc=tld
ldap_sudo_search_base = ou=sudoers,dc=mydomain,dc=tld
ldap_default_bind_dn = uid=rootserver,cn=users,cn=accounts,dc=mydomain,dc=tld
ldap_default_authtok_type = password
ldap_default_authtok = passssssss
ldap_user_ssh_public_key = ipaSshPubKey

######ADDED AFTER PROBLEM TO TRY FIX ERROR, NO SUCCESS##########
ipa_server_mode = True
krb5_store_password_if_offline = true
ipa_domain = mydomain.tld
ipa_hostname = ipa.mydomain.tld
ipa_server = ipa.mydomain.tld
####################################################

[sssd]
services = nss, pam, ssh, sudo
config_file_version = 2
domains = mydomain.tld
[nss]

[pam]

[sudo]

[autofs]

[ssh]

[pac]