On Thu, Mar 05, 2015 at 10:22:35AM +0100, Łukasz Jaworski wrote:
> > This ^^ line tells me it's a known SSSD bug:
> > https://fedorahosted.org/sssd/ticket/2421
> > This bug only happens in a combination of old client and a particular
> > server version.
> > IIRC a subsequent server update fixed the ACIs on the server so that at
> > least objectClass was readable. You can also work around the bug on the
> > client by disabling dereference:
> > ldap_deref_threshold = 0
> > btw sssd version 1.8 is quite old and not supported upstream anymore..
> We will switch to newer version sssd.
> Best regards,
You can also open a bug against Ubuntu and ask them to backport the fix
for #2421, it should be doable (but I haven't tried, really..)
Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project