On Wed, May 16, 2018 at 12:04 PM, Ronald Wimmer via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
Hi,

is there a way to configure parameters in sssd.conf when calling ipa-client-install? It would be very helpful to be able to specify these parameters:

[sssd]
default_domain_suffix = SOMEDOMAIN

[nss]
homedir_substring = /home
default_shell = /bin/bash

default_shell is the most important one as AD users have /bin/sh as their default shell.

It's an interesting question. I've often thought the same thing. In particular, I wanted to set debug_level and "full_name_format = %1$s", but since discovering the ansible playbook I've moved towards setting these thing programmatically. I'd recommend the playbook - you can set your own default sssd.conf template

https://github.com/freeipa/ansible-freeipa

cheers
L.