Есть сервер на нем работает самба в режиме DC, юзеров и группы видит, мэппинг UID/GID - работает. Но не берутся значения домашней директории и shell из атрибутов AD.

Вот пример:

http://share.izhes.com/shell.png

# getent passwd | grep bilex
IZHMASH-ENERGO1\bilex:*:10000:10001:Даровских Алексей Владимирович:/home/IZHMASH-ENERGO1/bilex:/bin/false

# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[netlogon]"
Processing section "[sysvol]"
Loaded services file OK.
Server role: ROLE_ACTIVE_DIRECTORY_DC
Press enter to see a dump of your service definitions

[global]
        workgroup = IZHMASH-ENERGO1
        realm = izhmash-energo1.local
        server role = active directory domain controller
        passdb backend = samba_dsdb
        winbind nss info = rfc2307
        dns forwarder = 192.168.6.2
        rpc_server:tcpip = no
        rpc_daemon:spoolssd = embedded
        rpc_server:spoolss = embedded
        rpc_server:winreg = embedded
        rpc_server:ntsvcs = embedded
        rpc_server:eventlog = embedded
        rpc_server:srvsvc = embedded
        rpc_server:svcctl = embedded
        rpc_server:default = external
        idmap_ldb:use rfc2307 = yes
        idmap config * : backend = tdb
        map archive = No
        map readonly = no
        store dos attributes = Yes
        vfs objects = dfs_samba4, acl_xattr

[netlogon]
        path = /var/lib/samba/sysvol/izhmash-energo1.local/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No