> This ^^ line tells me it's a known SSSD bug:
> This bug only happens in a combination of old client and a particular
> server version.
> IIRC a subsequent server update fixed the ACIs on the server so that at
> least objectClass was readable. You can also work around the bug on the
> client by disabling dereference:
> ldap_deref_threshold = 0
> btw sssd version 1.8 is quite old and not supported upstream anymore..
We will switch to newer version sssd.
Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project