On Thu, Oct 20, 2016 at 09:31:34AM -0000, Aleksey Maksimov wrote: > (Thu Oct 20 12:07:04 2016) [sssd[be[ad.holding.com]]] > [sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with > [(&(sAMAccountName=aleksey)(objectclass=user)(sAMAccountName=*)(&(uidNumber=*)(!(uidNumber=0))))][DC=ad,DC=holding,DC=com].
That's what I said earlier, if your configuration relies on ID mapping and you disable the subdomains provider, you need to define your domain SID with ldap_idmap_default_domain_sid _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org