Description of problem:
From our documentation: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8-beta/html/installing_identity_management_and_access_control/deploying-session-recording 

- You are supposed to be able to record sessions without doing a manual chsh <user> to /usr/bin/tlog-rec-session, by clicking on the configuration gear in Cockpit after having installed tlog and cockpit-session-recording.

I have double checked that /etc/sssd/conf.d/sssd-session-recording.conf is in place with correct permissions

 [root@htb ~]# stat /etc/sssd/conf.d/sssd-session-recording.conf 
  File: /etc/sssd/conf.d/sssd-session-recording.conf
  Size: 30        	Blocks: 8          IO Block: 4096   regular file
Device: fd00h/64768d	Inode: 886803      Links: 1
Access: (0600/-rw-------)  Uid: (    0/    root)   Gid: (    0/    root)
Context: unconfined_u:object_r:sssd_conf_t:s0
Access: 2018-12-05 14:32:55.707000000 +0100
Modify: 2018-12-05 14:32:55.707000000 +0100
Change: 2018-12-05 14:32:55.710000000 +0100
 Birth: -

[root@htb ~]# cat /etc/sssd/conf.d/sssd-session-recording.conf 
[session_recording]
scope=all

and have also restarted sssd.

/etc/tlog/tlog-rec-session.conf has been created as follows:

[root@htb ~]# cat /etc/tlog/tlog-rec-session.conf
{"shell":"/bin/bash","notice":"\nATTENTION! Your session is being recorded!\n\n","latency":10,"payload":2048,"log":{"input":true,"output":true,"window":true},"limit":{"rate":16384,"burst":32768,"action":"pass"},"file":{"path":""},"syslog":{"facility":"authpriv","priority":"info"},"journal":{"priority":"info","augment":true},"writer":"journal"}
[root@htb ~]# 


system-auth looks like this:

[root@htb ~]# cat /etc/pam.d/system-auth
# Generated by authselect on Thu Nov 29 15:05:46 2018
# Do not modify this file manually.

auth        required                                     pam_env.so
auth        required                                     pam_faildelay.so delay=2000000
auth        sufficient                                   pam_fprintd.so
auth        [default=1 ignore=ignore success=ok]         pam_succeed_if.so uid >= 1000 quiet
auth        [default=1 ignore=ignore success=ok]         pam_localuser.so
auth        sufficient                                   pam_unix.so nullok try_first_pass
auth        requisite                                    pam_succeed_if.so uid >= 1000 quiet_success
auth        sufficient                                   pam_sss.so forward_pass
auth        required                                     pam_deny.so

account     required                                     pam_unix.so
account     sufficient                                   pam_localuser.so
account     sufficient                                   pam_succeed_if.so uid < 1000 quiet
account     [default=bad success=ok user_unknown=ignore] pam_sss.so
account     required                                     pam_permit.so

password    requisite                                    pam_pwquality.so try_first_pass local_users_only
password    sufficient                                   pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password    sufficient                                   pam_sss.so use_authtok
password    required                                     pam_deny.so

session     optional                                     pam_keyinit.so revoke
session     required                                     pam_limits.so
-session    optional                                     pam_systemd.so
session     [success=1 default=ignore]                   pam_succeed_if.so service in crond quiet use_uid
session     required                                     pam_unix.so
session     optional                                     pam_sss.so


Version-Release number of selected component (if applicable):
Red Hat Enterprise Linux 8 Beta Snapshot 1 (latest at the time of writing)
cockpit-session-recording-1-23.el8.noarch
tlog-5-1.el8.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Install RHEL8 Beta Snapshot1 (latest at the time of writing)
2. Follow RHEL8 Beta documentation on cockpit-session-recording: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8-beta/html/installing_identity_management_and_access_control/deploying-session-recording
3. Notice that now sessions are recorded in cockpit

Actual results:
No sessions recorded via sssd 

Expected results:
Sessions recorded via sssd

Additional info:
Sessions do get recorded when using chsh <username> and setting users shell to /usr/bin/tlog-rec-session. But in our documentation we state "Be aware that this practice is not recommended to use"