Using LDAPv3 to authenticate against MacOS about authentik HOT 3 OPEN

[nss]
filter_groups = root
filter_users = root
reconnection_retries = 3

[sssd]
debug_level = 999
config_file_version = 2
reconnection_retries = 3
sbus_timeout = 30
domains = xxxx
#services = nss, pam, ssh

[pam]
reconnection_retries = 3

[domain/xxxx]
#cache_credentials = true
use_fully_qualified_names = false
ldap_id_mapping = false
override_homedir = /mnt/data/homes/%u
default_shell = /bin/bash

id_provider = ldap
chpass_provider = ldap
auth_provider = ldap
access_provider = permit
ldap_uri = ldap://ldap.xxxx

ldap_id_use_start_tls = true

ldap_schema = rfc2307bis
ldap_search_base = DC=ldap,DC=goauthentik,DC=io
ldap_user_search_base = ou=users,DC=ldap,DC=goauthentik,DC=io
ldap_group_search_base = ou=groups,DC=ldap,DC=goauthentik,DC=io

ldap_user_object_class = user
ldap_user_name = cn
ldap_group_object_class = group
ldap_group_name = cn

#ldap_access_order = filter
#ldap_access_filter = memberOf=cn=smb,ou=groups,DC=ldap,DC=goauthentik,DC=io

ldap_default_bind_dn = cn=ldapservice,ou=users,DC=ldap,DC=goauthentik,DC=io
ldap_default_authtok = your_password_to_ldapservice