sssd.conf for Samba 4 DC

[sssd]
    services = nss, pam
    config_file_version = 2
    domains = generagames.com

[nss]
    entry_negative_timeout = 0
    debug_level = 5

[pam]
    debug_level = 5

[domain/generagames.com]
    debug_level = 5
    enumerate = true 

    id_provider = ad
    auth_provider = ad
    chpass_provider = ad
    access_provider = ad

    dyndns_update = false

    ad_hostname = dc1.generagames.com
    ad_server = dc1.generagames.com
    ad_domain = generagames.com

    ldap_schema = ad
    ldap_id_mapping = true

    fallback_homedir = /home/%u
    default_shell = /bin/bash

    ldap_sasl_mech = gssapi
    ldap_sasl_authid = host/dc1.generagames.com
    krb5_keytab = /var/lib/samba/private/secrets.keytab
    ldap_krb5_init_creds = true