> This ^^ line tells me it's a known SSSD bug:
>    https://fedorahosted.org/sssd/ticket/2421
> This bug only happens in a combination of old client and a particular
> server version.
> IIRC a subsequent server update fixed the ACIs on the server so that at
> least objectClass was readable. You can also work around the bug on the
> client by disabling dereference:
>    ldap_deref_threshold = 0
> btw sssd version 1.8 is quite old and not supported upstream anymore..


We will switch to newer version sssd.

Best regards,
Łukasz Jaworski

Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project

Reply via email to