anchor.diff:  config_file_version = 2
   services = nss, pam<% if node['sssd_ldap']['ldap_sudo'] %>, sudo<% end %><% if node['sssd_ldap']['ldap_ssh'] %>, ssh<% end %>
   <% if node['sssd_ldap']['domains'].kind_of?(::Hash) %>
  -domains = <%=node['sssd_ldap']['domains'].keys.join(",")%>
  +domains = LDAP,<%=node['sssd_ldap']['domains'].keys.join(",")%>
   <% else %>
   domains = LDAP
   <% end %>
  
positive.code: [pam]
  
  <% if node['sssd_ldap']['ldap_ssh'] %>[ssh]<% end %>
  
  <% if node['sssd_ldap']['domains'].kind_of?(::Hash) %>
  <%   node['sssd_ldap']['domains'].each_key {|dkey| %>
  
negative.code: max_id = <%= node['sssd_ldap']['domains'][dkey]['max_id'] ? node['sssd_ldap']['domains'][dkey]['max_id'] : node['sssd_ldap']['max_id'] %>
  
    <% } %>
  <% end %>
  