Trying to get rid of having to define NIS groups along with AD. But also would like to keep ability to set shell and homedirectory without resorting to a template.
However, unixHomeDirectory and loginShell (when defined in our AD) show up in getent until 'su -' or login and then they disappear.
Can't tell if I need to use ALL posix (uid, gid, nis groups,etc) or not.
[root@machine1 db]# getent passwd user1
user1:*:975801176:975800513:User One:/home/user1:/bin/bash
[root@machine1 db]# su - user1
[user1@machine1 ~]$ echo $SHELL
/bin/bash
[user1@machine1 ~]$ logout
[root@machine1 db]# getent passwd user1
user1:*:975801176:975800513:User One:/:
[root@machine1 db]# su - user1
-sh-4.1$ echo $SHELL
/bin/sh
-sh-4.1$ logout
[root@machine1 db]#
Nothing really in sssd_nss.log other than complaining about a missing homedir template.