https://bugs.openldap.org/show_bug.cgi?id=9972
--- Comment #3 from dpa-openldap@aegee.org dpa-openldap@aegee.org --- It would be better if entries, which are anyway not returned in the request, are skipped by the SSS overlay, when sorting.
That is, SSS on SEARCH shall consider only entries which will be returned by SEARCH when no SSS is used.