Oh and in my auth.log I get:
Aug 12 11:52:10 perf-hpc01 su[60487]: pam_sss(su:auth): authentication failure;
logname=perform uid=1002 euid=0 tty=/dev/pts/13 ruser=perform rhost= user=tbeaudry
Aug 12 11:52:10 perf-hpc01 su[60487]: pam_sss(su:auth): received for user tbeaudry: 6
(Permission denied)
which is issue #5 in the Assorted common SSSD authentication problem of the wiki. My
account is not locked, and I don't want a temporary fix via access_provider=permit