This tip was huge: setsebool authlogin_nsswitch_use_ldap 1

Fedora now has all the sssd authentication. I changed all of the sss occurences in system-auth and password-auth and nsswitch.conf to make this work.

the authconfig tool leaves the pam_sss referenced even if you disable it?

Thanks for this.