ldap auth failure

I created a few users in 389 dirsrv, it seems to be fine, but trying to configure a client VM with sssd, it complains it can't see the user at all:

sshd[22467]: pam_sss(sshd:auth): received for user john: 10 (User not known to the underlying authentication module)

journalctl isn't showing much more to help other than that. Even with debug_level = 6

Any ideas would help..