[Samba] unixHomeDirectory, loginShell, etc. on Samba4 AD DC

[Sketch]

On Wed, 16 Sep 2015, L.P.H. van Belle wrote:

> When the user log in for the first time, a local user is created in 
> /etc/passwd and primary group created in /etc/group, and a local home 
> directory is created in /home. This is useful on roaming computers when 
> the password is set up to be cached by for example libpam-ccreds or sssd 
> to allow login without network connectivity using the password provided 
> by a network authentication service like Kerberos or LDAP.

This sounds like a byzantine hack bound to cause issues down the road 
(password synchronization anyone?), unless the goal is to log them into 
the domain once just to clone their user account onto the local machine.

You mention sssd, but one of the features of sssd (like winbind) is to 
cache login credentials for later offline login.  I'm not sure about 
winbind, since I don't use it, but sssd has configuration options to let 
you set credential lifetimes, which could be useful if you need long 
offline login periods for laptops.  You may also need to need to modify 
the kerberos ticket lifetimes in /etc/krb5.conf if you want to cache 
kerberos credentials for long periods of time.