[Freeipa-users] group issue (freeipa4)

[Jakub Hrozek]

On Thu, Mar 05, 2015 at 10:22:35AM +0100, Łukasz Jaworski wrote:
> > This ^^ line tells me it's a known SSSD bug:
> >    https://fedorahosted.org/sssd/ticket/2421
> > 
> > This bug only happens in a combination of old client and a particular
> > server version.
> > 
> > IIRC a subsequent server update fixed the ACIs on the server so that at
> > least objectClass was readable. You can also work around the bug on the
> > client by disabling dereference:
> >    ldap_deref_threshold = 0
> > 
> > btw sssd version 1.8 is quite old and not supported upstream anymore..
> 
> Thx.
> 
> We will switch to newer version sssd.
> 
> Best regards,
> Ender

You can also open a bug against Ubuntu and ask them to backport the fix
for #2421, it should be doable (but I haven't tried, really..)