Yes downgrade works. I disabled "ad_gpo_access_control = permissive". Rebooted. Wasn't able to login with a token.
Downgraded, rebooted. Was able to login with a token. % dpkg -l | grep 1.13.4-1ubuntu1.9 ii libipa-hbac0 1.13.4-1ubuntu1.9 amd64 FreeIPA HBAC Evaluator library ii libnss-sss:amd64 1.13.4-1ubuntu1.9 amd64 Nss library for the System Security Services Daemon ii libpam-sss:amd64 1.13.4-1ubuntu1.9 amd64 Pam module for the System Security Services Daemon ii libsss-idmap0 1.13.4-1ubuntu1.9 amd64 ID mapping library for SSSD ii libsss-nss-idmap0 1.13.4-1ubuntu1.9 amd64 SID based lookups library for SSSD ii python-sss 1.13.4-1ubuntu1.9 amd64 Python module for the System Security Services Daemon ii sssd 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- metapackage ii sssd-ad 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- Active Directory back end ii sssd-ad-common 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- PAC responder ii sssd-common 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- common files ii sssd-ipa 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- IPA back end ii sssd-krb5 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- Kerberos back end ii sssd-krb5-common 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- Kerberos helpers ii sssd-ldap 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- LDAP back end ii sssd-proxy 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- proxy back end ii sssd-tools 1.13.4-1ubuntu1.9 amd64 System Security Services Daemon -- tools -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1742752 Title: system error(4) since latest update on xenial To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1742752/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
