https://bugs.openldap.org/show_bug.cgi?id=9972
--- Comment #4 from Quanah Gibson-Mount quanah@openldap.org --- (In reply to dpa-openldap@aegee.org from comment #3)
It would be better if entries, which are anyway not returned in the request, are skipped by the SSS overlay, when sorting.
That is, SSS on SEARCH shall consider only entries which will be returned by SEARCH when no SSS is used.
The SSS overlay should only be evaluating entries that match the original search parameters including scope. If you are seeing different behavior please provide a script that demonstrates the issue.