[Freeipa-users] External group membership stuck