> This ^^ line tells me it's a known SSSD bug: > https://fedorahosted.org/sssd/ticket/2421 > > This bug only happens in a combination of old client and a particular > server version. > > IIRC a subsequent server update fixed the ACIs on the server so that at > least objectClass was readable. You can also work around the bug on the > client by disabling dereference: > ldap_deref_threshold = 0 > > btw sssd version 1.8 is quite old and not supported upstream anymore..
Thx. We will switch to newer version sssd. Best regards, Ender -- Łukasz Jaworski -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
