On Thu, Oct 27, 2011 at 02:03:33PM +0200, Jakub Hrozek wrote:
I'm confused -- earlier you reported that ldapsearch only
worked when you used the -N option (=do not canonicalize).
Passing -N to ldapsearch has the same effect as setting
ldap_sasl_canonicalize = false
I misread your earlier e-mail, you actually said that ldapsearch only
works *without* the -N option. In that case, SSSD works as expected
because SSSD default to "don't canonicalize", while ldapsearch defaults
to "canonicalize".