sssd ad_access_filter parsing error with valid filter

Bug #1412023 reported by Stefan Hegedüs on 2015-01-17
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sssd (Ubuntu)

Bug Description

If I use an valid advanced filter I get an exception which is generated by the parse_sub_filter function in ad_access.c


valid filter for make a nested group lookup (User -> Domain Member -> GR-Linux-User)

[parse_filter] (0x0020): Keyword in filter (memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc) did not match expected format

Jakub Hrozek (jakub-hrozek) wrote :

It's getting confused by the ":". Can you try prefixing the filter with "DOM:" or "FOREST:" and the name of the forest/domain as well?

See man sssd-ad for examples.

It's working with the prefix, but should it not work with a filter and bracket?

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers