Comment 4 for bug 1578415

/var/log/auth.log seems to indicate that AD users are properly authenticated, they just aren't authorized:

  May 4 09:27:10 myhostname compiz: pam_sss(unity:auth): authentication success; logname= uid=12345 euid=12345 tty= r
  user= rhost= user=myuser
  May 4 09:27:10 myhostname compiz: gkr-pam: unlocked login keyring
  May 4 09:27:10 myhostname compiz: pam_sss(unity:account): Access denied for user myuser: 6 (Permission denied)