Hi,

On Fri, May 12, 2023 at 5:47 PM Ronald Wimmer <ronaldw@ronzo.at> wrote:

On 12.05.23 11:35, Florence Blanc-Renaud via FreeIPA-users wrote:
> Hi,
>
> can you provide more details? Did you use the "Default Trust View"
> idview or did you create another one? Which attributes did you override
> for your AD user?

Of course I can. I should have provided more info in the first place...

I created an own ID view called "zsh" which overrides the login shell
for certain users on certain hosts (currently 2 hosts, one running
CentOS 7.9 and the other one running OL 9.1)

Are those hosts IPA servers or IPA clients? I'm asking because it's not supported to apply an ID view on IPA servers, except for the "Default Trust View" (see https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/id-views and https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/managing_idm_users_groups_hosts_and_access_control_rules/using-an-id-view-to-override-a-user-attribute-value-on-an-idm-client_managing-users-groups-hosts#id-views_using-an-id-view-to-override-a-user-attribute-value-on-an-IdM-client).

flo