<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 14/07/15 18:50, Petr Vobornik wrote:<br>
</div>
<blockquote cite="mid:55A53DC6.70105@redhat.com" type="cite">hbacrule
has it default attributes (which are used in search) attribute
<br>
'memberhostgroup'. This attr is not in ACI nor in schema. If the
search
<br>
contains an attribute which can't be read then the search won't
return
<br>
anything.
<br>
<br>
Therefore all searches with filter set fail.
<br>
<br>
Also I don't think this is a proper fix because any custom ACIs
will cause the bug again. Same issue in
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/5055">https://fedorahosted.org/freeipa/ticket/5055</a>
<br>
<br>
<a class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/5130">https://fedorahosted.org/freeipa/ticket/5130</a>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
ACK<br>
<br>
Patch that fixes the similar issue with selinuxusermap is attached.<br>
<br>
<pre class="moz-signature" cols="72">--
Martin Basti</pre>
</body>
</html>