Comment 8 for bug 1979350

Focal verification

Reproducing the bug with the non-proposed focal packages:

root@sssdclient:~# apt-cache policy sssd
sssd:
  Installed: 2.2.3-3ubuntu0.8
  Candidate: 2.2.3-3ubuntu0.8
  Version table:
 *** 2.2.3-3ubuntu0.8 500
        500 http://br.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
        500 http://br.archive.ubuntu.com/ubuntu focal-security/main amd64 Packages
        100 /var/lib/dpkg/status

Login fails:

root@sssdclient:~# login <email address hidden>
Password:

System error

And the logs confirm it's the non-ascii character in GPT.INI (after bumping sssd log level to 2):
(Wed Jul 6 13:56:44 2022) [gpo_child[3382]] [ad_gpo_parse_ini_file] (0x0020): ini_config_file_open failed [84][Invalid or incomplete multibyte or wide character]
(Wed Jul 6 13:56:44 2022) [gpo_child[3382]] [ad_gpo_parse_ini_file] (0x0020): Error encountered: 84.
(Wed Jul 6 13:56:44 2022) [gpo_child[3382]] [perform_smb_operations] (0x0020): Cannot parse ini file: [84][Invalid or incomplete multibyte or wide character]
(Wed Jul 6 13:56:44 2022) [gpo_child[3382]] [main] (0x0020): perform_smb_operations failed.[84][Invalid or incomplete multibyte or wide character].
(Wed Jul 6 13:56:44 2022) [gpo_child[3382]] [main] (0x0020): gpo_child failed!

I then updated the sssd packages to the ones from focal-proposed:
root@sssdclient:~# apt-cache policy sssd
sssd:
  Installed: 2.2.3-3ubuntu0.9
  Candidate: 2.2.3-3ubuntu0.9
  Version table:
 *** 2.2.3-3ubuntu0.9 500
        500 http://br.archive.ubuntu.com/ubuntu focal-proposed/main amd64 Packages
        100 /var/lib/dpkg/status

Retry the login, which works this time:
root@sssdclient:~# login <email address hidden>
Password:
Welcome to Ubuntu 20.04.4 LTS (GNU/Linux 5.4.0-1070-kvm x86_64)
(...)
Creating directory '/<email address hidden>'.

<email address hidden>@sssdclient:~$ id
uid=906401103(<email address hidden>) gid=906400513(domain <email address hidden>) groups=906400513(domain <email address hidden>)

And the log only has this entry this time:
(Wed Jul 6 14:00:07 2022) [gpo_child[4779]] [gpo_sanitize_buffer_content] (0x0040): Value for key 'displayName' contains non-ascii symbol. Replacing with '?'

focal verification succeeded.