On Jan 8, 2021, at 22:36, Rob Crittenden <rcritten@redhat.com> wrote:

SJTU wrote:

Hi,

   We use 389 as our LDAP service and connect it via SSSD. We find that users cannot change their login shell via "chsh". Is there any suggestion?

You might want to cross-post this on the SSSD mailing list.

rob