<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 23/01/15 21:10, Koen de Boeve wrote:<br>
    </div>
    <blockquote cite="mid:54C2B8A8.2080901@galaxystudios.com"
      type="cite">
      <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
      the idea is that sssd reads the GPO and then on that basis either
      denies or allows access through its pam module <br>
      At least, that s how I think it works - or should work - ;)<br>
      <br>
      <blockquote style="border: 0px none;"
        cite="mid:54C2B699.4080509@gmail.com" type="cite">
        <div style="margin:30px 25px 10px 25px;" class="__pbConvHr">
          <div style="display:table;width:100%;border-top:1px solid
            #EDEEF0;padding-top:5px">
            <div
              style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
                photoaddress="repenny241155@gmail.com"
                photoname="Rowland Penny"
                src="cid:part1.04030507.08060808@gmail.com"
                name="compose-unknown-contact.jpg" height="25px"
                width="25px"></div>
            <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
              <a moz-do-not-send="true"
                href="mailto:repenny241155@gmail.com"
                style="color:#737F92
                !important;padding-right:6px;font-weight:bold;text-decoration:none
                !important;">Rowland Penny</a></div>
            <div
              style="display:table-cell;white-space:nowrap;vertical-align:middle;">
              <font color="#9FA2A5"><span style="padding-left:6px">23
                  Jan 2015 22:01</span></font></div>
          </div>
        </div>
        <div style="color:#888888;margin-left:24px;margin-right:24px;"
          __pbrmquotes="true" class="__pbConvBody">
          <meta http-equiv="Content-Type" content="text/html;
            charset=utf-8">
          <div class="moz-cite-prefix">On 23/01/15 20:58, Koen de Boeve
            wrote:<br>
          </div>
          <br>
          Thought so, forget it, Linux knows absolutely nothing about
          GPO's<br>
          <br>
          Rowland<br>
          <br>
          <div>_______________________________________________<br>
            sssd-users mailing list<br>
            <a moz-do-not-send="true" class="moz-txt-link-abbreviated"
              href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
            <a moz-do-not-send="true" class="moz-txt-link-freetext"
              href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
          </div>
        </div>
        <div style="margin:30px 25px 10px 25px;" class="__pbConvHr">
          <div style="display:table;width:100%;border-top:1px solid
            #EDEEF0;padding-top:5px">
            <div
              style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
                photoaddress="koen@galaxystudios.com" photoname="Koen de
                Boeve" src="cid:part1.04030507.08060808@gmail.com"
                name="compose-unknown-contact.jpg" height="25px"
                width="25px"></div>
            <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
              <a moz-do-not-send="true"
                href="mailto:koen@galaxystudios.com"
                style="color:#737F92
                !important;padding-right:6px;font-weight:bold;text-decoration:none
                !important;">Koen de Boeve</a></div>
            <div
              style="display:table-cell;white-space:nowrap;vertical-align:middle;">
              <font color="#9FA2A5"><span style="padding-left:6px">23
                  Jan 2015 21:58</span></font></div>
          </div>
        </div>
        <div style="color:#888888;margin-left:24px;margin-right:24px;"
          __pbrmquotes="true" class="__pbConvBody">
          <meta http-equiv="Content-Type" content="text/html;
            charset=utf-8">
          Yes I am Rowland, well it is a separate Policy specifically
          for linux machines.<br>
          <br>
          <br>
          Regards, Koen<br>
          <br>
        </div>
        <div style="margin:30px 25px 10px 25px;" class="__pbConvHr">
          <div style="display:table;width:100%;border-top:1px solid
            #EDEEF0;padding-top:5px">
            <div
              style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
                photoaddress="repenny241155@gmail.com"
                photoname="Rowland Penny"
                src="cid:part1.04030507.08060808@gmail.com"
                name="compose-unknown-contact.jpg" height="25px"
                width="25px"></div>
            <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
              <a moz-do-not-send="true"
                href="mailto:repenny241155@gmail.com"
                style="color:#737F92
                !important;padding-right:6px;font-weight:bold;text-decoration:none
                !important;">Rowland Penny</a></div>
            <div
              style="display:table-cell;white-space:nowrap;vertical-align:middle;">
              <font color="#9FA2A5"><span style="padding-left:6px">23
                  Jan 2015 21:37</span></font></div>
          </div>
        </div>
        <div style="color:#888888;margin-left:24px;margin-right:24px;"
          __pbrmquotes="true" class="__pbConvBody"><br>
          <br>
          Can I ask if you are trying to get a linux machine to use a
          windows GPO ?
          <br>
          <br>
          Rowland
          <br>
          <br>
          _______________________________________________
          <br>
          sssd-users mailing list
          <br>
          <a moz-do-not-send="true" class="moz-txt-link-abbreviated"
            href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
          <br>
          <a moz-do-not-send="true" class="moz-txt-link-freetext"
            href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
          <br>
        </div>
      </blockquote>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
sssd-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a>
</pre>
    </blockquote>
    <br>
    OK, I'll believe you, now could someone explain how sssd can read a
    GPO that is supposed to (as far as I know) alter the registry on a
    windows machine and use those settings on a Linux machine that does
    have anything like a registry ?<br>
    <br>
    Rowland<br>
  </body>
</html>