Hide Forgot
This bug is created as a clone of upstream ticket: https://fedorahosted.org/sssd/ticket/1087 nss_ldap provides a trivial way to force a shell to users: nss_override_attribute_value loginShell /bin/bash However, with SSSD if the shell option is not populated in LDAP the shell users will get depends on libc, usually being /bin/sh and no way for an administrator to force a certain shell. SSSD should allow "easily" to force a certain shell for all users, regardless of LDAP configuration.
Closing bug wont fix. Please refer to upstream ticket for more details