Perfect, that's exactly what i was looking for. I was previously starting sssd w/ -d4, and wasn't getting that. Looks like it's part of -d5.
# grep sdap_get_map /var/log/sssd/sssd_default.log | awk -FOption '{ print $2 }'
ldap_entry_usn has value (null)
ldap_rootdse_last_usn has value (null)
ldap_user_object_class has value posixAccount
ldap_user_name has value uid
ldap_user_pwd has value userPassword
ldap_user_uid_number has value uidNumber
ldap_user_gid_number has value gidNumber
ldap_user_gecos has value gecos
ldap_user_home_directory has value homeDirectory
ldap_user_shell has value loginShell
ldap_user_principal has value krbPrincipalName
ldap_user_fullname has value cn
ldap_user_member_of has value (null)
ldap_user_uuid has value (null)
ldap_user_modify_timestamp has value modifyTimestamp
ldap_user_shadow_last_change has value shadowLastChange
ldap_user_shadow_min has value shadowMin
ldap_user_shadow_max has value shadowMax
ldap_user_shadow_warning has value shadowWarning
ldap_user_shadow_inactive has value shadowInactive
ldap_user_shadow_expire has value shadowExpire
ldap_user_shadow_flag has value shadowFlag
ldap_user_krb_last_pwd_change has value krbLastPwdChange
ldap_user_krb_password_expiration has value krbPasswordExpiration
ldap_pwd_attribute has value pwdAttribute
ldap_group_object_class has value posixGroup
ldap_group_name has value cn
ldap_group_pwd has value userPassword
ldap_group_gid_number has value gidNumber
ldap_group_member has value memberuid
ldap_group_uuid has value (null)
ldap_group_modify_timestamp has value modifyTimestamp
ldap_entry_usn has value (null)
ldap_rootdse_last_usn has value (null)
ldap_user_object_class has value posixAccount
ldap_user_name has value uid
ldap_user_pwd has value userPassword
ldap_user_uid_number has value uidNumber
ldap_user_gid_number has value gidNumber
ldap_user_gecos has value gecos
ldap_user_home_directory has value homeDirectory
ldap_user_shell has value loginShell
ldap_user_principal has value krbPrincipalName
ldap_user_fullname has value cn
ldap_user_member_of has value (null)
ldap_user_uuid has value (null)
ldap_user_modify_timestamp has value modifyTimestamp
ldap_user_shadow_last_change has value shadowLastChange
ldap_user_shadow_min has value shadowMin
ldap_user_shadow_max has value shadowMax
ldap_user_shadow_warning has value shadowWarning
ldap_user_shadow_inactive has value shadowInactive
ldap_user_shadow_expire has value shadowExpire
ldap_user_shadow_flag has value shadowFlag
ldap_user_krb_last_pwd_change has value krbLastPwdChange
ldap_user_krb_password_expiration has value krbPasswordExpiration
ldap_pwd_attribute has value pwdAttribute
ldap_group_object_class has value posixGroup
ldap_group_name has value cn
ldap_group_pwd has value userPassword
ldap_group_gid_number has value gidNumber
ldap_group_member has value memberuid
ldap_group_uuid has value (null)
ldap_group_modify_timestamp has value modifyTimestamp
ldap_entry_usn has value (null)
ldap_rootdse_last_usn has value (null)
ldap_user_object_class has value posixAccount
ldap_user_name has value uid
ldap_user_pwd has value userPassword
ldap_user_uid_number has value uidNumber
ldap_user_gid_number has value gidNumber
ldap_user_gecos has value gecos
ldap_user_home_directory has value homeDirectory
ldap_user_shell has value loginShell
ldap_user_principal has value krbPrincipalName
ldap_user_fullname has value cn
ldap_user_member_of has value (null)
ldap_user_uuid has value (null)
ldap_user_modify_timestamp has value modifyTimestamp
ldap_user_shadow_last_change has value shadowLastChange
ldap_user_shadow_min has value shadowMin
ldap_user_shadow_max has value shadowMax
ldap_user_shadow_warning has value shadowWarning
ldap_user_shadow_inactive has value shadowInactive
ldap_user_shadow_expire has value shadowExpire
ldap_user_shadow_flag has value shadowFlag
ldap_user_krb_last_pwd_change has value krbLastPwdChange
ldap_user_krb_password_expiration has value krbPasswordExpiration
ldap_pwd_attribute has value pwdAttribute
ldap_group_object_class has value posixGroup
ldap_group_name has value cn
ldap_group_pwd has value userPassword
ldap_group_gid_number has value gidNumber
ldap_group_member has value memberuid
ldap_group_uuid has value (null)
ldap_group_modify_timestamp has value modifyTimestamp
ldap_entry_usn has value (null)
ldap_rootdse_last_usn has value (null)
ldap_user_object_class has value group
ldap_user_name has value uid
ldap_user_pwd has value userPassword
ldap_user_uid_number has value uidNumber
ldap_user_gid_number has value gidNumber
ldap_user_gecos has value gecos
ldap_user_home_directory has value homeDirectory
ldap_user_shell has value loginShell
ldap_user_principal has value krbPrincipalName
ldap_user_fullname has value cn
ldap_user_member_of has value (null)
ldap_user_uuid has value (null)
ldap_user_modify_timestamp has value modifyTimestamp
ldap_user_shadow_last_change has value shadowLastChange
ldap_user_shadow_min has value shadowMin
ldap_user_shadow_max has value shadowMax
ldap_user_shadow_warning has value shadowWarning
ldap_user_shadow_inactive has value shadowInactive
ldap_user_shadow_expire has value shadowExpire
ldap_user_shadow_flag has value shadowFlag
ldap_user_krb_last_pwd_change has value krbLastPwdChange
ldap_user_krb_password_expiration has value krbPasswordExpiration
ldap_pwd_attribute has value pwdAttribute
ldap_group_object_class has value group
ldap_group_name has value cn
ldap_group_pwd has value userPassword
ldap_group_gid_number has value gidNumber
ldap_group_member has value memberuid
ldap_group_uuid has value (null)
ldap_group_modify_timestamp has value modifyTimestamp
Doing an ldapsearch against 2008 R2 user account, i see the following for home directory:
I've set ldap_user_home_directory to unixHomeDirectory, but am still pulling the user with / set as home directory.
Also, does sssd cache stuff? And maybe I'm pulling old data? I tried to getent passwd a different user, and it failed. Hummm.