HI!
I'm currently testing a custom build of sssd 1.13.4 against OpenLDAP server.
I notice this filter in the log:
(&(objectClass=sudoRole)(modifyTimestamp>=1))
Obviously it's a USN fallback filter since USN attribute is not available on OpenLDAP. But the LDAP syntax of assertion value "1" is wrong and therefore no match.
Ciao, Michael.
On 04/27/2016 05:46 PM, Michael Ströder wrote:
HI!
I'm currently testing a custom build of sssd 1.13.4 against OpenLDAP server.
I notice this filter in the log:
(&(objectClass=sudoRole)(modifyTimestamp>=1))
Obviously it's a USN fallback filter since USN attribute is not available on OpenLDAP. But the LDAP syntax of assertion value "1" is wrong and therefore no match.
Ciao, Michael.
Hi, we had [1] but that should already be fixed in 1.13.4. Can you send me SSSD domain logs and your sssd.conf please?
On 2016-04-28 11:18, Pavel Březina wrote:
On 04/27/2016 05:46 PM, Michael Ströder wrote:
I'm currently testing a custom build of sssd 1.13.4 against OpenLDAP server.
I notice this filter in the log:
(&(objectClass=sudoRole)(modifyTimestamp>=1))
Obviously it's a USN fallback filter since USN attribute is not available on OpenLDAP. But the LDAP syntax of assertion value "1" is wrong and therefore no match.
Hi, we had [1] but that should already be fixed in 1.13.4. Can you send me SSSD domain logs and your sssd.conf please?
I assume with [1] you meant a ticket. Which [1]?
Which log level do you want to see?
Ciao, Michael.
On 04/28/2016 11:46 AM, Michael Ströder wrote:
On 2016-04-28 11:18, Pavel Březina wrote:
On 04/27/2016 05:46 PM, Michael Ströder wrote:
I'm currently testing a custom build of sssd 1.13.4 against OpenLDAP server.
I notice this filter in the log:
(&(objectClass=sudoRole)(modifyTimestamp>=1))
Obviously it's a USN fallback filter since USN attribute is not available on OpenLDAP. But the LDAP syntax of assertion value "1" is wrong and therefore no match.
Hi, we had [1] but that should already be fixed in 1.13.4. Can you send me SSSD domain logs and your sssd.conf please?
I assume with [1] you meant a ticket. Which [1]?
Which log level do you want to see?
Oops, here is link to the ticket: https://fedorahosted.org/sssd/ticket/2970
sssd-users@lists.fedorahosted.org
-
Michael Ströder -
Pavel Březina