[sssd]
domains = ct.czech-tv.cz
config_file_version = 2
services = nss, pam

[domain/ct.czech-tv.cz]
default_shell = /bin/bash
krb5_store_password_if_offline = True
cache_credentials = True
krb5_realm = CT.CZECH-TV.CZ
realmd_tags = manages-system joined-with-adcli 
id_provider = ad
fallback_homedir = /home/%u@%d
ad_domain = ct.czech-tv.cz
#use_fully_qualified_names = True
use_fully_qualified_names = False
ldap_id_mapping = True
access_provider = simple
simple_allow_users = sm233387
simple_allow_groups = APP_ROOT