I can confirm that today, I traveled through the same problem, and fixed it the same way
you did, no other solution worked for me. I'm running IPA 4.9.6 on Rocky Linux 8.5. I
have no so big groups, the bigger around 300 users. I think maybe there's still an
unsolved problem a year later. I hope it can be solved some day. Thank you all very much
for your work, IPA is a great project.