SSSD Malformed search filter

[p-e-t-e-r10]

Hello,

I configure file /etc/sssd/sssd.conf to LDAP config. I use ldap_access_filter, but in logs I see (2024-11-30 10:56:01): [be[fri.uniza.sk]] [generic_ext_search_handler] (0x0020): [RID#9] sdap_get_generic_ext_recv request failed: [1432158247]: Malformed search filter
When I give this filter to ldapsearch this filter found my user.
What could be the reason for this error?
Please let me know, thanks

[Fryguy]

I'm not sure - depends on the specific search filter I guess - I tried searching your issue in google and there are similar issues and people have replied with their own fixes. For example this one talks about if a ! is in the search filter: https://community.spiceworks.com/t/sssd-ldap_search_ext-failed-bad-search-filter/792608

[p-e-t-e-r10]

@matthewd @kbrock @tenderlove @Fryguy Hello guys, I still have problems integrate ManageIQ with LDAP. I am using quinteros-2.2 version of MIQ. I configure LDAP based on documentation https://www.manageiq.org/docs/reference/latest/auth/ldap.html.
My /etc/sssd/sssd.conf looks like this:
LDAP-ManageIQ.txt
I can connect to AD server using ldapsearch with my credentials with ldap_access_filter which is also in sssd.conf. Also I give kinit and see my user in klist.
When i give id [email protected] I got id: ‘[email protected]’: no such user
I also give to GUI groups which is the same as in AD server, but when I perform in the group Look up External Authentication Groups and give User to Look Up my user [email protected] I got Error during 'LDAP Group Look Up': Unable to get groups for user [email protected] - No such file or directory; caused by 3 sender=:1.407 -> dest=:1.415 serial=36 reply_serial=34 path=; interface=; member= error_name=sbus.Error.NotFound
In file /var/log/sssd/sssd_win.kis.fri.uniza.sk.log I do not any issues, but when I give parameter ldap_id_mapping = True I can see error (2024-12-05 9:09:36): [be[win.kis.fri.uniza.sk]] [sdap_get_users_done] (0x0040): [RID#39] Failed to retrieve users [1432158247][Malformed search filter].

• ... skipping repetitive backtrace ...
  (2024-12-05 9:09:36): [be[win.kis.fri.uniza.sk]] [generic_ext_search_handler] (0x0020): [RID#40] sdap_get_generic_ext_recv request failed: [1432158247]: Malformed search filter
  Can you please help me fix this problem why I can not integrate MIQ to LDAP server. If you want to add more files for debugging just let me know. Thank you!

[Fryguy]

@tenderlove and @matthewd no longer work on this project. Also, hi @tenderlove and @matthewd! 👋 😃

---

@p-e-t-e-r10 you mentioned that ldapsearch works, but is that working from within the appliance with the sssd configuration? Otherwise, I think the setup looks correct, and since I can't replicate it locally, it's hard to debug. This feels like something specific with sssd and your particular ldap_access_filter. Perhaps it's best to ask the SSSD team what could be wrong with the filter that it gives you "Malformed Search Filter". Their repo is at https://github.com/SSSD/sssd.