sssd ad_access_filter parsing error with valid filter

Bug #1412023 reported by Stefan Hegedüs on 2015-01-17
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sssd (Ubuntu)
Undecided
Unassigned

Bug Description

If I use an valid advanced filter I get an exception which is generated by the parse_sub_filter function in ad_access.c

Filter:
(memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc)

valid filter for make a nested group lookup (User -> Domain Member -> GR-Linux-User)
http://msdn.microsoft.com/en-us/library/aa746475%28v=vs.85%29.aspx

Exception:
[parse_filter] (0x0020): Keyword in filter (memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc) did not match expected format

Jakub Hrozek (jakub-hrozek) wrote :

It's getting confused by the ":". Can you try prefixing the filter with "DOM:" or "FOREST:" and the name of the forest/domain as well?

See man sssd-ad for examples.

It's working with the prefix, but should it not work with a filter and bracket?

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers