URL:
https://github.com/SSSD/sssd/pull/530
Title: #530: GPO: Add "thinlinc" to ad_gpo_map_remote_interactive
CendioOssman commented:
"""
Any backports of this to stable branches would also be nice as the failure mode is rather
confusing (the default logging doesn't state why the account is denied login).
"""
See the full comment at
https://github.com/SSSD/sssd/pull/530#issuecomment-371759313