From 3de04f7ea81f7e88cd190f25bd973389f17d1c1b Mon Sep 17 00:00:00 2001
From: Hinrikus Wolf <hinrikus@fsmpi.rwth-aachen.de>
Date: Thu, 11 Jan 2018 12:45:31 +0100
Subject: [PATCH] ad-auth: ignore group policies in sssd now basic auth via pam
 should work

---
 ad-auth/templates/sssd.conf.j2 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index c729bce..3f72974 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -25,3 +25,4 @@ ldap_user_fullname = displayName
 krb5_lifetime = 48h
 krb5_renewable_lifetime = 200h
 krb5_renew_interval = 30m
+ad_gpo_access_control = disabled # ignore group policies 
-- 
GitLab