This is fixed by upstream patch: https://github.com/freeipa/freeipa/commit/8a9c5629214cd71e88a5ac9c1b639faad9fc4ec1 Please add this to Trixie. Thanks -- Frederik Himpe <frederik at frehi.be>