Public bug reported: [Description] GPO support in focal doesn't focal MS ADTS spec and is not functional. It means that the default domain policy containing the security policy for example is not applied.
This SRU backports GPO patches from current stable version of SSSD. [Test Case] 1. Install a machine with SSSD and join and AD domain where the controller is a Windows machine. 2. Add the machine to an OU of the domain 3. Boot the machine and login ad a user of the domain. 4. Verify the content of /var/lib/sss/gpo_cache/ When it fails, this directory is empty On success it is filled with the GPO downloaded from the domain controller. It is also possible to check the journal for errors, there should be non related to GPO. [Where problems could occur] This code is limited to GPO on AD which is not working in focal. Worst case, it is still not functional. ** Affects: sssd (Ubuntu) Importance: High Status: Fix Released ** Affects: sssd (Ubuntu Focal) Importance: High Status: Triaged ** Also affects: sssd (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: sssd (Ubuntu) Status: New => Fix Released ** Changed in: sssd (Ubuntu) Importance: Undecided => High ** Changed in: sssd (Ubuntu Focal) Importance: Undecided => High ** Changed in: sssd (Ubuntu Focal) Status: New => Triaged ** Summary changed: - [SRU] Fix GPO support on Focal + [SRU] Fix GPO support in Focal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1933116 Title: [SRU] Fix GPO support in Focal To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1933116/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs