Please follow https://fedorahosted.org/sssd/wiki/Troubleshooting to see why you're denied access, there is no way for anyone to make an informed decision without log files.
Also ldap_use_tokengroups = false is likely to have negative performance impact on your environment.
Lastly, drop ldap_use_tokengroups = false from the config file, it's already the default for the ad provider.
Please follow https:/ /fedorahosted. org/sssd/ wiki/Troublesho oting to see why you're denied access, there is no way for anyone to make an informed decision without log files.
Also ldap_use_ tokengroups = false is likely to have negative performance impact on your environment.
Lastly, drop ldap_use_ tokengroups = false from the config file, it's already the default for the ad provider.