On Mon, May 11, 2015 at 12:01:12PM +0200, Sumit Bose wrote:
Hi,
and now with patch ...
this patch fixes an issue seen when newer idview-aware SSSD clients try
to connect to older IPA server. As mentioned in the commit message it is
due to different error codes returned by different versions of 389ds.
This issue only becomes important when the old IPA server has a trust to
AD because the issue prevents SSSD from reading the SID of the IPA
domain. Without trust the issue can be verified by checking the logs.
ipa_get_view_name_done() should fail with the message "get_view_name
request failed, looks like server does not support views." and continue
to read data about the IPA domain. Without this path you should see
"get_view_name request failed." and the whole request should be
canceled.
bye,
Sumit