It works.
I've made an ACI similar to the one on the example and it works now. I'll play
with policies a little bit these days.
I've detected a localization problem that occurs in GDM and Lightdm so I believe that
it's in sssd. when user is asked for change his password some strings are translated
and some others aren't. is this a known problem in sssd?
àngel