The passwd(4) man page contains a list of valid formats for the passwd
entry in the nsswitch.conf file. Adding ad to these configurations in the nsswitch.conf file
is supported. However, changing AD user passwords through the passwd command is not
supported. If found in the passwd entry during a password update, ad
is skipped. Use the kpasswd command to update AD user passwords.
The ad search order can be added to existing valid passwd and
group entries in nsswitch.conf. For example:
passwd: files ad group: files ad