[Freeipa-users] Re: primary group ID for AD users