Here's the config. I had to sanitize it.
[sssd] config_file_version = 2 services = nss, pam domains = domain1
[nss] filter_groups = root filter_users = root
[pam] pam_verbosity = 3
[domain/domain1] id_provider = ldap auth_provider = ldap chpass_provider = ldap ldap_schema = rfc2307 ldap_uri = ldaps://ldap1.domain1.com,ldaps://ldap2.domain1.com ldap_chpass_uri = ldaps://ldap1.domain1.com ldap_search_base = dc=domain1: enumerate = false cache_credentials = false ldap_tls_reqcert = hard min_id = 1000 debug_level=9
Logs here. I just grabbed the logs for the period during the login, not the sssd startup. http://pastebin.com/1hCx2UK3
Thanks!