Solution: delete the -u definitions from /etc/oddjobd.conf.d/oddjobd-mkhomedir.conf and oddjobd will use the umask from /etc/login.defs . I feel this should be default.