Have taken this over to the sssd list: https://lists.fedorahosted.org/pipermail/sssd-users/2014-May/001662.html A big thanks to everyone for their comments and patience with us. Steve pp all at the hh3.site domain