RockyLinux 8

# mkhomedir module

dnf install oddjob

systemctl enable oddjobd.service

systemctl start oddjobd.service

# replace ldap_tls_cacertdir with ldap_tls_cacert in /etc/sssd/conf.d/sssd.conf

#ldap_tls_cacertdir = /etc/openldap/cacerts

ldap_tls_cacert = /etc/openldap/cacerts/caname.crt

# chmod

chmod 0600 /etc/openldap/cacerts/caname.crt

chmod 0600 /etc/sssd/conf.d/sssd.conf

systemctl enable autofs

systemctl enable sssd

dnf install autofs nfs-utils

[root@localhost]# grep -Ev "^$|^\s*#" /etc/idmapd.conf

[General]

Domain = DOMAIN.TLD

[Mapping]

Nobody-User = nobody

Nobody-Group = nobody

[Translation]

[Static]

[UMICH_SCHEMA]

LDAP_server = LDAP.DOMAIN.TLD

LDAP_base = dc=DOMAIN,dc=TLD

authselect select sssd with-mkhomedir with-sudo --force