====== Config LDAP client on linux ======

https://docs.pagure.org/SSSD.sssd/users/ldap_with_ad.html

AD can create and store POSIX attributes, such as uidNumber, gidNumber, unixHomeDirectory, or loginShell. 


Define the required user shell settings using these options: 
  * shell_fallback sets a fallback value, which is used only if no shells are defined in AD 
  * override_shell sets a value that always overrides the shell defined in AD 
  * default_shell sets a default shell value 
  * allowed_shells and vetoed_shells set lists of allowed or blacklisted shells 

In the [domain] section, use one of these options: 
  * fallback_homedir sets a fallback home directory format, which is used only if a home directory is not defined in AD 
  * override_homedir sets a home directory template, which always overrides the home directory defined in AD