sssd.conf

[sssd]
domains = cat.local
config_file_version = 2
services = nss, pam

[domain/cat.local]
debug_level = 7
ad_domain = cat.local
auth_provider = ad
krb5_realm = CAT.LOCAL
realmd_tags = manages-system joined-with-adcli
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
use_fully_qualified_names = False
fallback_homedir = /home/%u@%d
access_provider = ad