Error Message - being thrown -what is 'SG 900D'

[PWy]

Can you give me any pointers on the error message?:
{"error":{"root_cause":[{"type":"security_exception","reason":"_opendistro_security_dls_query does not match (SG 900D)"}],"type":"security_exception","reason":"_opendistro_security_dls_query does not match (SG 900D)"},"status":500}
I suspect it is something to do with the Management Policy.
Knowing what ‘SG 900D’ is -might give me apointer?

[Gsmitt]

Hey @PWy

I found this, perhaps it might help.

DLS and LDAP Backend Roles _opendistro_security_dls_query does not match (SG 900D)

Opensearch 2.0 with LDAP for auth & authz configured and working We try to add DLS to be backed by LDAP Backend Roles, but we no luck. We see a stack trace with “_opendistro_security_dls_query does not match (SG 900D)” in the opensearch logs. (Kibana Web: statusCode: 500) If we configure the users as local internal users and add backend roles to this local users, everything works as expected As we tried to investigate the differences between local users and ldap users we can see for local u…

[Bruno]

Hi All

We investigated this issue I while ago and came to the assumption that seems to be a bug, but found a workaround.

It looks like the code fails when it has to create the “private hidden” Index for the user at his first login.
If you disable private tenant in the config, this index won’t be created and everything works as expected. If you don’t need private tenants, probably this is they way to go