diff --git a/389-ds-base.spec b/389-ds-base.spec
index 2827a6e97a728a8ca573c7962e9c7f7de7e83ad9..21cc8ee81200ae97310638f9ab40517dc94e5eb3 100644
--- a/389-ds-base.spec
+++ b/389-ds-base.spec
@@ -6,7 +6,7 @@ ExcludeArch:   i686
 Name:          389-ds-base
 Summary:       Base 389 Directory Server
 Version:       2.3.2
-Release:       3
+Release:       4
 License:       GPLv3+
 URL:           https://www.port389.org
 Source0:       https://releases.pagure.org/389-ds-base/389-ds-base-%{version}.tar.bz2
@@ -15,6 +15,8 @@ Source2:       389-ds-base-devel.README
 
 Patch0:        Replace-LegacyVersion-with-DSVersion-to-fix-build-error.patch
 Patch1:        fix-using-borrow-on-a-double-reference.patch
+# Refer: https://github.com/389ds/389-ds-base/pull/5374
+Patch2:        fix-dsidm-posixgroup-get_dn-fails-with-search_ext.patch
 
 BuildRequires: nspr-devel nss-devel >= 3.34 perl-generators openldap-devel libdb-devel cyrus-sasl-devel icu
 BuildRequires: libicu-devel pcre-devel cracklib-devel gcc-c++ net-snmp-devel lm_sensors-devel bzip2-devel
@@ -320,6 +322,9 @@ exit 0
 %{_mandir}/*/*
 
 %changelog
+* Fri Oct 27 2023 wangkai <13474090681@163.com> - 2.3.2-4
+- Fix dsidm posixgroup get_dn fails with search_ext()
+
 * Thu Aug 03 2023 wulei <wu_lei@hoperun.com> - 2.3.2-3
 - Fix using `.borrow()` on a double reference
 
diff --git a/fix-dsidm-posixgroup-get_dn-fails-with-search_ext.patch b/fix-dsidm-posixgroup-get_dn-fails-with-search_ext.patch
new file mode 100644
index 0000000000000000000000000000000000000000..c429911f278608a3d0469a1259fa142f294e2f48
--- /dev/null
+++ b/fix-dsidm-posixgroup-get_dn-fails-with-search_ext.patch
@@ -0,0 +1,11 @@
+--- 389-ds-base-2.3.2/src/lib389/lib389/cli_idm/posixgroup.py	2022-09-28 22:32:51.000000000 +0800
++++ 389-ds-base-2.3.2/src/lib389/lib389/cli_idm/posixgroup.py_bak	2023-10-27 09:52:31.896331122 +0800
+@@ -34,7 +34,7 @@
+     _generic_get(inst, basedn, log.getChild('_generic_get'), MANY, rdn, args)
+ 
+ def get_dn(inst, basedn, log, args):
+-    dn = lambda args: _get_arg( args.dn, msg="Enter dn to retrieve")
++    dn = _get_arg( args.dn, msg="Enter dn to retrieve")
+     _generic_get_dn(inst, basedn, log.getChild('_generic_get_dn'), MANY, dn, args)
+ 
+ def create(inst, basedn, log, args):