Somehow the filter is not replaced...??? still (objectclass=posixaccount): [Wed Jun 12 11:03:39.016496 2019] [:error] [pid 17432] ipa: DEBUG: stageuser_find: pre_callback new filter=(objectclass=\70\6f\73\69\78\61\63\63\6f\75\6e\74)
Sorry, looks like this debug output is not representative. I tested on the working IPA server, and I see the same lines in error_log:
[Wed Jun 12 11:19:00.953636 2019] [:error] [pid 3550] ipa: DEBUG: raw: stageuser_find(None, version=u'2.230') [Wed Jun 12 11:19:00.953938 2019] [:error] [pid 3550] ipa: DEBUG: stageuser_find(None, all=False, raw=False, version=u'2.230', no_members=True, pkey_only=False) [Wed Jun 12 11:19:00.957529 2019] [:error] [pid 3550] ipa: DEBUG: stageuser_find: pre_callback new filter=(objectclass=\70\6f\73\69\78\61\63\63\6f\75\6e\74) [Wed Jun 12 11:19:00.959717 2019] [:error] [pid 3550] ipa: INFO: [jsonserver_session] admin@POC.DCN.TELEKOM.DE: stageuser_find/1(None, version=u'2.230'): SUCCESS
But despite these same lines, the command FINDS the user!