On 05/03/2016 06:27 AM, Robie Basak wrote:
> Thank you for helping with this Jakub. From Franz's response I presume
> this issue is now resolved? Setting this bug as Invalid accordingly. If
> this is incorrect please feel free to open with an explanation.
>
> ** Changed in: sssd (Ubuntu)
> Status: Confirmed => Invalid
>
That is incorrect. By changing that setting, it actually disables policy
enforcement from AD (which is probably not what is desired).
The error code 6 indicates PAM_SYSTEM_ERR, which means that a bug happened and
SSSD was unable to make a proper determination of access (thus it defaults to
denial for safety).
So this is still a bug and logs will be needed to figure out what failed.
On 05/03/2016 06:27 AM, Robie Basak wrote:
> Thank you for helping with this Jakub. From Franz's response I presume
> this issue is now resolved? Setting this bug as Invalid accordingly. If
> this is incorrect please feel free to open with an explanation.
>
> ** Changed in: sssd (Ubuntu)
> Status: Confirmed => Invalid
>
That is incorrect. By changing that setting, it actually disables policy
enforcement from AD (which is probably not what is desired).
The error code 6 indicates PAM_SYSTEM_ERR, which means that a bug happened and
SSSD was unable to make a proper determination of access (thus it defaults to
denial for safety).
So this is still a bug and logs will be needed to figure out what failed.
See: https:/ /fedorahosted. org/sssd/ wiki/Troublesho oting