see explanation below. Explanation yum -y install sssd authconfig-gtk krb5-workstation authconfig-gtk // open the graphical interface Modify user account database to ldap, fill up DN and LDAP SERVER as questions required, use TLS to encrypt connections making tick, write http://server.domain11.example.com/pub/EXAMPLE-CA-CERT to download ca, authentication method choose ldap password. You can test if the ldapuser is added by the following command: Id ldapuser1 Note: user password doesn't not need to set