sssd ad_access_filter parsing error with valid filter

[Stefan Hegedüs]

If I use an valid advanced filter I get an exception which is generated by the parse_sub_filter function in ad_access.c

Filter:
(memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc)

valid filter for make a nested group lookup (User -> Domain Member -> GR-Linux-User)
http://msdn.microsoft.com/en-us/library/aa746475%28v=vs.85%29.aspx

Exception:
[parse_filter] (0x0020): Keyword in filter (memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc) did not match expected format

[Jakub Hrozek (jakub-hrozek)]

It's getting confused by the ":". Can you try prefixing the filter with "DOM:" or "FOREST:" and the name of the forest/domain as well?

See man sssd-ad for examples.

[Stefan Hegedüs (stefan+ubuntuone)]

It's working with the prefix, but should it not work with a filter and bracket?