u-always-restrict-virtual-users
By default, all virtual users (users from a password database other than
/etc/passwd) are restricted to their home directory. The
reason for this is because it is easy to forget to place virtual users
as a member of a restricted group, and most administrators want virtual
users restricted.
To change this behavior, you can set u-always-restrict-virtual-users=no.
Examples:
u-always-restrict-virtual-users=yes
u-always-restrict-virtual-users=no
Recommendation:
u-always-restrict-virtual-users=yes