We are running FreeIPA 4.4

I just upgraded a system from fedora 25 to fedora 26 using dnf.  

The first problem is that the mkhomedir option is lost.  I've reinstated it with:
authconfig --enablemkhomedir --update
The second problem is that AD users still can't login.  This is a server system with a tty style login.  The response from login is "Login incorrect".  When I look in the logs, I see "Permission denied".  hbactest says that the users should have access.

This all worked before the upgrade.  Any clues where to look next?

Thanks,
Steve