From b395e381e084d82c306be4f4ce02750f62804a39 Mon Sep 17 00:00:00 2001 From: TimInLasVegas Date: Fri, 13 Jan 2023 09:17:21 -0800 Subject: [PATCH] Update active-directory-client.md Without ad_gpo_access_control = permissive in the [domain] section of the SSSD conf I could not log in to my Server 2022 AD from PopOS. I've found dozens of places on the internet where people have complained that they can not log in, just like the issue I had. None of those people seemed to find the fix. If this isn't added we should at least leave it as a comment for those who can't log in on their AD instance. --- content/active-directory-client.md | 1 + 1 file changed, 1 insertion(+) diff --git a/content/active-directory-client.md b/content/active-directory-client.md index 657e2a353d..444d197e64 100644 --- a/content/active-directory-client.md +++ b/content/active-directory-client.md @@ -106,6 +106,7 @@ Pop!\_OS and Ubuntu can be joined to an Active Directory domain, which allows us ldap_sasl_authid = POP-OS$ krb5_keytab = /etc/sssd/my-keytab.keytab ldap_krb5_init_creds = true + ad_gpo_access_control = permissive ``` After saving, set the appropriate permissions on that configuration file: