On 04/27/2016 05:46 PM, Michael Ströder wrote:

HI!

I'm currently testing a custom build of sssd 1.13.4 against OpenLDAP server.

I notice this filter in the log:

(&(objectClass=sudoRole)(modifyTimestamp>=1))

Obviously it's a USN fallback filter since USN attribute is not available on OpenLDAP. But the LDAP syntax of assertion value "1" is wrong and therefore no match.

Ciao, Michael.

Hi, we had [1] but that should already be fixed in 1.13.4. Can you send me SSSD domain logs and your sssd.conf please?

On 04/28/2016 11:46 AM, Michael Ströder wrote:

On 2016-04-28 11:18, Pavel Březina wrote:

...

On 04/27/2016 05:46 PM, Michael Ströder wrote:

...

I'm currently testing a custom build of sssd 1.13.4 against OpenLDAP server.

I notice this filter in the log:

(&(objectClass=sudoRole)(modifyTimestamp>=1))

Obviously it's a USN fallback filter since USN attribute is not available on OpenLDAP. But the LDAP syntax of assertion value "1" is wrong and therefore no match.

Hi, we had [1] but that should already be fixed in 1.13.4. Can you send me SSSD domain logs and your sssd.conf please?

I assume with [1] you meant a ticket. Which [1]?

Which log level do you want to see?

Oops, here is link to the ticket: https://fedorahosted.org/sssd/ticket/2970