ehlo,
If there is a problem with GPO configuration on AD, then function
ad_gpo_access_done set error to the request and authentication was rejected
with pam system error. It should not happen in permissive mode.
Patch is attached. I can modify debug messages or add some logging to the
syslog. Any suggestion is welcomed.
LS