anchor.diff:  config_file_version = 2
   services = nss, pam<% if node['sssd_ldap']['ldap_sudo'] %>, sudo<% end %><% if node['sssd_ldap']['ldap_ssh'] %>, ssh<% end %>
   <% if node['sssd_ldap']['domains'].kind_of?(::Hash) %>
  -domains = <%=node['sssd_ldap']['domains'].keys.join(",")%>
  +domains = LDAP,<%=node['sssd_ldap']['domains'].keys.join(",")%>
   <% else %>
   domains = LDAP
   <% end %>
  
positive.code: max_id = <%= node['sssd_ldap']['domains'][dkey]['max_id'] ? node['sssd_ldap']['domains'][dkey]['max_id'] : node['sssd_ldap']['max_id'] %>
  
    <% } %>
  <% else %>
  [domain/LDAP]
  auth_provider = <%= node['sssd_ldap']['auth_provider'] %>
  chpass_provider = <%= node['sssd_ldap']['chpass_provider'] %>
  <% if node['sssd_ldap']['ldap_sudo'] %>sudo_provider = <%= node['sssd_ldap']['sudo_provider'] %><% end %>
  id_provider = <%= node['sssd_ldap']['id_provider'] %>
  cache_credentials = <%= node['sssd_ldap']['cache_credentials'] %>
  enumerate = <%= node['sssd_ldap']['enumerate'] %>
  
  ldap_schema = <%= node['sssd_ldap']['ldap_schema'] %>
  ldap_uri = <%= node['sssd_ldap']['ldap_uri'] %>
  
  ldap_tls_reqcert = <%= node['sssd_ldap']['ldap_tls_reqcert'] %>
  ldap_tls_cacert = <%= node['sssd_ldap']['ldap_tls_cacert'] %>
  ldap_id_use_start_tls = <%= node['sssd_ldap']['ldap_id_use_start_tls'] %>
  
  ldap_search_base = <%= node['sssd_ldap']['ldap_search_base'] %>
  ldap_user_search_base = <%= node['sssd_ldap']['ldap_user_search_base'] %>
  ldap_user_object_class = <%= node['sssd_ldap']['ldap_user_object_class'] %>
  ldap_user_name = <%= node['sssd_ldap']['ldap_user_name'] %>
  <% if node['sssd_ldap']['override_homedir'] %>
  override_homedir = <%= node['sssd_ldap']['override_homedir'] %>
  <% end %>
  shell_fallback = <%= node['sssd_ldap']['shell_fallback'] %>
  
  ldap_group_search_base = <%= node['sssd_ldap']['ldap_group_search_base'] %>
  ldap_group_object_class = <%= node['sssd_ldap']['ldap_group_object_class'] %>
  ldap_group_name = <%= node['sssd_ldap']['ldap_group_name'] %>
  
  <% if node['sssd_ldap']['ldap_default_bind_dn'] %>ldap_default_bind_dn = <%= node['sssd_ldap']['ldap_default_bind_dn'] %><% end %>
  <% if node['sssd_ldap']['ldap_default_authtok'] %>ldap_default_authtok = <%= node['sssd_ldap']['ldap_default_authtok'] %><% end %>
  <% if node['sssd_ldap']['ldap_default_authtok_type'] %>ldap_default_authtok_type = <%= node['sssd_ldap']['ldap_default_authtok_type'] %><% end %>
  
  <% if node['sssd_ldap']['ldap_access_filter'] %>
  access_provider = <%= node['sssd_ldap']['access_provider'] %>
  ldap_access_filter = <%= node['sssd_ldap']['ldap_access_filter'] %>
  <% end %>
  
  <% if node['sssd_ldap']['ldap_user_ssh_public_key'] %>ldap_user_ssh_public_key = <%= node['sssd_ldap']['ldap_user_ssh_public_key'] %><% end %>
  min_id = <%= node['sssd_ldap']['min_id'] %>
  max_id = <%= node['sssd_ldap']['max_id'] %>
  
  <% end %>
  
negative.code: [pam]
  
  <% if node['sssd_ldap']['ldap_ssh'] %>[ssh]<% end %>
  
  [domain/LDAP]
  auth_provider = <%= node['sssd_ldap']['auth_provider'] %>
  chpass_provider = <%= node['sssd_ldap']['chpass_provider'] %>
  <% if node['sssd_ldap']['ldap_sudo'] %>sudo_provider = <%= node['sssd_ldap']['sudo_provider'] %><% end %>
  id_provider = <%= node['sssd_ldap']['id_provider'] %>
  cache_credentials = <%= node['sssd_ldap']['cache_credentials'] %>
  enumerate = <%= node['sssd_ldap']['enumerate'] %>
  
  ldap_schema = <%= node['sssd_ldap']['ldap_schema'] %>
  ldap_uri = <%= node['sssd_ldap']['ldap_uri'] %>
  
  ldap_tls_reqcert = <%= node['sssd_ldap']['ldap_tls_reqcert'] %>
  ldap_tls_cacert = <%= node['sssd_ldap']['ldap_tls_cacert'] %>
  ldap_id_use_start_tls = <%= node['sssd_ldap']['ldap_id_use_start_tls'] %>
  
  ldap_search_base = <%= node['sssd_ldap']['ldap_search_base'] %>
  ldap_user_search_base = <%= node['sssd_ldap']['ldap_user_search_base'] %>
  ldap_user_object_class = <%= node['sssd_ldap']['ldap_user_object_class'] %>
  ldap_user_name = <%= node['sssd_ldap']['ldap_user_name'] %>
  <% if node['sssd_ldap']['override_homedir'] %>
  override_homedir = <%= node['sssd_ldap']['override_homedir'] %>
  <% end %>
  shell_fallback = <%= node['sssd_ldap']['shell_fallback'] %>
  
  ldap_group_search_base = <%= node['sssd_ldap']['ldap_group_search_base'] %>
  ldap_group_object_class = <%= node['sssd_ldap']['ldap_group_object_class'] %>
  ldap_group_name = <%= node['sssd_ldap']['ldap_group_name'] %>
  
  <% if node['sssd_ldap']['ldap_default_bind_dn'] %>ldap_default_bind_dn = <%= node['sssd_ldap']['ldap_default_bind_dn'] %><% end %>
  <% if node['sssd_ldap']['ldap_default_authtok'] %>ldap_default_authtok = <%= node['sssd_ldap']['ldap_default_authtok'] %><% end %>
  <% if node['sssd_ldap']['ldap_default_authtok_type'] %>ldap_default_authtok_type = <%= node['sssd_ldap']['ldap_default_authtok_type'] %><% end %>
  
  <% if node['sssd_ldap']['ldap_access_filter'] %>
  access_provider = <%= node['sssd_ldap']['access_provider'] %>
  ldap_access_filter = <%= node['sssd_ldap']['ldap_access_filter'] %>
  <% end %>
  
  <% if node['sssd_ldap']['ldap_user_ssh_public_key'] %>ldap_user_ssh_public_key = <%= node['sssd_ldap']['ldap_user_ssh_public_key'] %><% end %>
  min_id = <%= node['sssd_ldap']['min_id'] %>
  max_id = <%= node['sssd_ldap']['max_id'] %>
  
  <% if node['sssd_ldap']['domains'].kind_of?(::Hash) %>
  <%   node['sssd_ldap']['domains'].each_key {|dkey| %>
  