[SSSD] Re: Question: LDAP provider doesn't show group member

[Lukas Slebodnik]

On (22/09/16 12:54), Petr Cech wrote:
> On 09/22/2016 12:40 PM, Jakub Hrozek wrote:
> > Yes, because your ldapsearch authenticates as a user DN, but sssd
> > doesn't authenticate by default.
> >
> > Try adding:
> > ldap_sasl_mech = gssapi
> > krb5_server = algol.beta
> > krb5_realm = BETA
> >
> > to your sssd.conf.
> >
> > I wonder if this is visible in server logs for future..
>
> Thanks Jakub, it works now.
>
> So, ticket #3186 isn't bug.
>
> Would you like to have similiar messages about filter
> and attributes in ldap answer in our logs?

No.

We need to improve/reduce logs and not to complicate them.

LS