[Freeipa-users] Default shell for AD-domain accounts

[Jakub Hrozek]

> On 24 Jan 2016, at 12:00, Rob Verduijn <rob.verduijn at gmail.com> wrote:
> 
> Hello,
> 
> I'm trying to get an ipa server to trust a microsoft AD-domain.
> 
> So far I've managed to get the trust to work and I can login with an
> active directory user on the ipa clients.
> 
> Now I see the default shell is set to /bin/sh.
> Since the preffered shel is bash for me I wish to change this.
> It doesn't help to set this in the ipa server config since these
> accounts are external ms accounts.
> 
> In the goog old days we used to have posix attributes schemas in the
> AD one of them being the shell.
> 
> Sadly this is a thing of the past.
                          ~~~~~~~~~~~~

Are you referring to IMU being deprecated? IIRC the attributes should work..even though MS is deprecating the UI..

Alternatively, since the clients read the ID info via the server, overrinding the shell in IPA server's sssd.conf should work as well.

> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Windows_Integration_Guide/ex.sssd-ad-posix.html
> 
> How do I define a new default shell for all ms-AD accounts in ipa ?
> 
> Cheers
> Rob Verduijn
> 
> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project