It appears that if mkhomedir is false, than NSS and PAM are configured to not use SSSD:
if $sssd::mkhomedir {
$pam_mkhomedir_file_ensure = file
$authconfig_args = ['--enablemkhomedir', '--enablesssd', '--enablesssdauth']
} else {
$pam_mkhomedir_file_ensure = absent
$authconfig_args = ['--disablemkhomedir', '--disablesssd', '--disablesssdauth']
}
It seems that enablemkhomedir should be a setting independent of enablesssd/enablesssdauth.
It appears that if mkhomedir is false, than NSS and PAM are configured to not use SSSD:
It seems that enablemkhomedir should be a setting independent of enablesssd/enablesssdauth.