Sorry about the line breaks. Adding "enable_files_domain = false" to the [sssd] section fixed the issue. Just out of curiosity, could I ask what that does? Its not in the man page.

Thanks so much for the help.

Geoff.

On Wed, 2018-01-24 at 15:46 +0100, Jakub Hrozek wrote:
I'm sorry, but the line wraps in your mail are missing, at least that's
how the mail got rendered for me..so I'm having trougle reading the
logs..

Nonetheless, does it help if you add enable_files_domain = false into
the [sssd] section?

On Wed, Jan 24, 2018 at 08:58:11AM -0500, Geoff Goehle wrote:
Thanks for the response. I was on #sssd and someone said that duplicate usernames like we have is a no go, so I was planning on just removing local accounts and deal with the fallout. However, I'm happy to look for a different fix. Geoff. - We are using the implicit files provider - The sssd.conf file is [domain/place.edu]id_provider = adaccess_provider = ad ldap_idmap_range_min = 200000ldap_idmap_range_max = 2000200000ldap_idmap_range_size = 800000ldap_pwd_policy = none sudo_provider = none debug_level = 8 [sssd]services = nss, pamconfig_file_version = 2domains = place.edu [nss]override_shell=/bin/bashoverride_homedir=/home/%ufilter_users = <stuff>filter_groups = <stuff> [pam]