On Sat, May 31, 2014 at 04:53:31PM +0200, Lukas Slebodnik wrote:
>(Sat May 31 16:25:29 2014) [sssd[be[hh3.site]]]
[ad_gpo_access_done]
>(0x0040): GPO-based access control failed.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
You can change value of option ad_gpo_access_control to disable.
Default value is permissive. I would say it is a bug that we fail in permissive
mode. Details are in manual page sssd-ad.
LS
Yes, I agree, but there's a patch on the list already. Let's review it
for beta2!