The only one think that comes to my mind is to add /usr/bin/zsh to the .bashrc file (and probably delete the rest of its content as it won't be needed). But this is a hack
It seems like .bashrc is managed by the puppet, so it could be overwritten at times. I think an LDAP solution is preferred, as you suggested.