URL: https://github.com/SSSD/sssd/pull/5241 Title: #5241: GPO: respect ad_gpo_implicit_deny when evaluation rules
pbrezina commented: """ Ah, ok. And shouldn't it work also the other way - if ad_gpo_implicit_deny = False and there is not explicit deny rule then allow access? """
See the full comment at https://github.com/SSSD/sssd/pull/5241#issuecomment-679012653
sssd-devel@lists.fedorahosted.org