This tip was huge: setsebool authlogin_nsswitch_use_ldap 1
Fedora now has all the sssd authentication. I changed all of the sss occurences in system-auth and password-auth and nsswitch.conf to make this work.
the authconfig tool leaves the pam_sss referenced even if you disable it?
Thanks for this.