https://docs.pagure.org/SSSD.sssd/users/ldap_with_ad.html

AD can create and store POSIX attributes, such as uidNumber, gidNumber, unixHomeDirectory, or loginShell.

Define the required user shell settings using these options:

• shell_fallback sets a fallback value, which is used only if no shells are defined in AD
• override_shell sets a value that always overrides the shell defined in AD
• default_shell sets a default shell value
• allowed_shells and vetoed_shells set lists of allowed or blacklisted shells

In the [domain] section, use one of these options:

• fallback_homedir sets a fallback home directory format, which is used only if a home directory is not defined in AD
• override_homedir sets a home directory template, which always overrides the home directory defined in AD