sssd ad_access_filter parsing error with valid filter

Bug #1412023 reported by Stefan Hegedüs
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sssd (Ubuntu)
New
Undecided
Unassigned

Bug Description

If I use an valid advanced filter I get an exception which is generated by the parse_sub_filter function in ad_access.c

Filter:
(memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc)

valid filter for make a nested group lookup (User -> Domain Member -> GR-Linux-User)
http://msdn.microsoft.com/en-us/library/aa746475%28v=vs.85%29.aspx

Exception:
[parse_filter] (0x0020): Keyword in filter (memberOf:1.2.840.113556.1.4.1941:=CN=GR-Linux-User,OU=AD-Groups,DC=sample,DC=loc) did not match expected format

Revision history for this message
Jakub Hrozek (jakub-hrozek) wrote :

It's getting confused by the ":". Can you try prefixing the filter with "DOM:" or "FOREST:" and the name of the forest/domain as well?

See man sssd-ad for examples.

Revision history for this message
Stefan Hegedüs (stefan+ubuntuone) wrote :

It's working with the prefix, but should it not work with a filter and bracket?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.