[Freeipa-users] group issue (freeipa4)

[Łukasz Jaworski]

> This ^^ line tells me it's a known SSSD bug:
>    https://fedorahosted.org/sssd/ticket/2421
> 
> This bug only happens in a combination of old client and a particular
> server version.
> 
> IIRC a subsequent server update fixed the ACIs on the server so that at
> least objectClass was readable. You can also work around the bug on the
> client by disabling dereference:
>    ldap_deref_threshold = 0
> 
> btw sssd version 1.8 is quite old and not supported upstream anymore..

Thx.

We will switch to newer version sssd.

Best regards,
Ender
-- 
Łukasz Jaworski