In source/nsswitch/nss_info_template.c templates (lp_template_homedir and lp_template_shell) are not parsed for substitution. All other function calls pass lp_template_homedir/shell to talloc_sub_specified. I found a workaround using winbind nss info = ad Frediano Ziglio