Learn more about these different git repos.
Other Git URLs
Based on the supportedControls value of the RootDSE sssd decides whether to use the LDAP_CONTROL_X_DEREF control to speed up group member lookups.
The "supportedControls" Attribute is however not really authoritative about whether the specific database backend of the LDAP Server where that deref query ends up does really support that control. E.g. with OpenLDAP you need to explicitly enable deref support per database by adding some configuration (slapo-deref). Hence it would be really helpful if sssd could, when the LDAP Server returns LDAP_UNAVAILABLE_CRITICAL_EXTENSION for deref query, fallback to a mode that doesn't use the LDAP_CONTROL_X_DEREF control.
I thought we already did that. I agree we should be doing a fallback, Thanks for the bug report!
Fields changed
owner: somebody => jcholast status: new => assigned
milestone: NEEDS_TRIAGE => SSSD 1.10 beta rhbz: => todo
attachment 0001-LDAP-If-deref-search-fails-try-again-without-deref.patch
ralf, can you please check if the attached patch fixes the issue for you?
Replying to [comment:4 jcholast]:
ralf, can you please check if the attached patch fixes the issue for you? Yes that fixes the problem. Thanks!
selected: => Not need
Moving tickets that are not a priority for SSSD 1.10 into the next release.
milestone: SSSD 1.10 beta => SSSD 1.11 beta
This ticket actually had a patch before it was moved to 1.11. We just reviewed it now.
_comment0: This ticket actually had a patch before it was moved to 1.10. We just reviewed it now.
No clone needed, RHEL QE doesn't test against eDirectory
rhbz: todo => 0
Metadata Update from @ralf: - Issue assigned to jcholast - Issue set to the milestone: SSSD 1.10 beta
SSSD is moving from Pagure to Github. This means that new issues and pull requests will be accepted only in SSSD's github repository.
This issue has been cloned to Github and is available here: - https://github.com/SSSD/sssd/issues/2702
If you want to receive further updates on the issue, please navigate to the github issue and click on subscribe button.
subscribe
Thank you for understanding. We apologize for all inconvenience.
Login to comment on this ticket.