> Do they appear if you search using the filter:
> "(&(objectclass=User)(cn=a000569))"
Yes.

> Since that's what you specified for ldap_user_object_class.
Yes, well the user is of that objectClass,
----
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
----

> If it doesn't have this objectClass (or it's not readable by anonymous
> or the bind DN you may have specified) then we will ignore it on a
search
Ok, understood.

/Patrik


On Fri, 2010-12-10 at 14:14 -0500, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 12/10/2010 02:07 PM, Martinsson Patrik wrote:
> >> Do the members a000569, a000680 and a000590 exist in the directory
> >> server if you look them up directly?
> >
> > If you mean like 'id a000569/a000680/a000590', then yes, if I remembered
> > it correctly, I turned off my workcomputer so I cant comfirm it since
> > I'm home now.
> >
> > If you mean like 'ldapsearch 'ou=People,dc=xx,dc=xx,dc=xx'
> > "(&(objectclass=*)(cn=a000569))"', then yes (for all those users).
> >
>
> Do they appear if you search using the filter:
> "(&(objectclass=User)(cn=a000569))"
>
> Since that's what you specified for ldap_user_object_class.
>
> If it doesn't have this objectClass (or it's not readable by anonymous
> or the bind DN you may have specified) then we will ignore it on a search.
>
> - --
> Stephen Gallagher
> RHCE 804006346421761
>
> Delivering value year after year.
> Red Hat ranks #1 in value among software vendors.
> http://www.redhat.com/promo/vendor/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk0Ce/oACgkQeiVVYja6o6NrFgCgggku9GxbMlWbYGiBUo1RMFXX
> xTAAn1ff6p6RyaCHY6Ihprj/+YAtxMKq
> =ujFY
> -----END PGP SIGNATURE-----
> _______________________________________________
> sssd-devel mailing list
> sssd-devel@lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel