On Fri, Apr 20, 2012 at 04:58:31PM +0200, Jakub Hrozek wrote:
https://fedorahosted.org/sssd/ticket/1258
The ticket mentioned that ID lookups were failing..I didn't reproduce
that, I only reproduced that dereference was not available if rootDSE
was not read.
As Stephen explained on IRC, the problem is that HBAC uses dereference
unconditionally and the access check fails if we are not able to
dereference host info.
I've tested that with the patch applied, HBAC works fine even when
anonymous binds are disabled and fails without the patch.