On Thu, Oct 20, 2016 at 09:31:34AM -0000, Aleksey Maksimov wrote:
(Thu Oct 20 12:07:04 2016) [sssd[be[ad.holding.com]]]
[sdap_get_generic_ext_step] (0x0400): calling ldap_search_ext with
[(&(sAMAccountName=aleksey)(objectclass=user)(sAMAccountName=*)(&(uidNumber=*)(!(uidNumber=0))))][DC=ad,DC=holding,DC=com].
That's what I said earlier, if your configuration relies on ID mapping
and you disable the subdomains provider, you need to define your domain
SID with ldap_idmap_default_domain_sid