[389-users] Some bind DNs sporadically can't search users

[Morgan Jones]

On Mar 3, 2014, at 11:07 AM, Ludwig Krispenz <lkrispen at redhat.com> wrote:

> Hi,
> 
> so you say that a search with a specific bind user sometimes succeeds and sometimes doesn't ?

Correct.

> If so, could you run this withe aci logging enabled ?

Sure though we are still unable to repeat the problem reliably so haven't caught it happening with aci debugging turned on.  I'm going to work on various scenarios to do so in our dev environment.

> Are groups involved in the acis and do these groups during these runs ?

Yes, most of our ACIs use groups to determine access.  I'm not sure I understand the second part of your question though.  I do suspect this has something to do with access control though as it's behaving exactly like the user is denied by the ACIs.

> Could you post your acis ?

Probably.  I'm working on permission to do so.

thanks,

-morgan