On 12/14/2015 03:36 PM, Petr Cech wrote:
Hi all,
there is patch for
https://fedorahosted.org/sssd/ticket/2791 attached.
Result of patch:
The message:
Dec 14 14:16:11 vm-058-166 sssd[be[uma.dev]]: dereference processing
failed : Input/output error
is replaced by
Dec 14 15:29:26 vm-058-166 sssd[be[uma.dev]]: LDAP server claims to
support deref, but deref search failed. Disabling deref for further
requests. You can permanently disable deref by setting
ldap_deref_threshold to 0 in domain configuration.
But I am little afraid of this patch. Why? I tested this work on RHEL 6
how it is described in the ticket.
If I tried to set
ldap_deref_threshold = 0
it was still falling into bad case and printed I/O error. So, if we
considered patch is right, there is question if advice in new message is
valid for IPA 3.x.
Regards
Petr
This threshold parameter applies for groups membership, not for views
where dereference is always used in current code.
The question is, why does sdap_x_deref_search_send fail with EIO?
Dereference should be supported with IPA...