Excellent. Replicating those attributes was it. Thanks

On Fri, Sep 4, 2015 at 2:17 AM, Jakub Hrozek <jhrozek@redhat.com> wrote:
On Thu, Sep 03, 2015 at 05:31:05PM -0500, jeff macfarland wrote:
> Trying to get rid of having to define NIS groups along with AD. But also
> would like to keep ability to set shell and homedirectory without resorting
> to a template.
>
> However, unixHomeDirectory and loginShell (when defined in our AD) show up
> in getent until 'su -' or login and then they disappear.

This is a known defect:
    https://fedorahosted.org/sssd/wiki/Troubleshooting

search for "The POSIX attributes disappear randomly after login".

Does that help?
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users