On Thu, 28 Aug 2014, Stefan Schäfer wrote:
PAM works. The problem was caused by a bug in sssd 1.12.
"ad_gpo_access_control = disabled" solved the problem.
Sure, glad you found a fix. Unless you've a good reason not to, I'd always
advise setting up your pam stack via authconfig, that way you can reasonably
assume it's correct.