The Google Secure LDAP Schema lists these two attributes as having default values:
- homeDirectory: The user’s POSIX home directory. Defaults to “/home/< username>”.
- loginShell: The user’s POSIX login shell. Defaults to “/bin/bash”.
Google Secure LDAP is read-only, going by this (emphasis mine):
- Returned when a request specifies an unsupported action. Google supports Abandon, Bind, Extended (for StartTLS), Search, and Unbind. Unsupported actions are: Add, Compare, Del, Modify, and ModifyDn.
This means that the usual ways of modifying login shells on LDAP (using
chsh.ldap, or writing an LDIF file and applying it using
etc.) won't work (and they don't - I tried anyway).
I have gone through the various attributes I can modify for a user, and I don't see an entry for either setting. While the default home directory isn't a problem, users can be picky about their shells (I am too).
Given this is a "default", it seems it should be possible to set a non-default value. How can I do that?
- I do have super-admin privileges (necessary for enabling and configuring LDAP in the first place)
- I posted this on the G Suite Admin community forum as well.