URL:
https://github.com/SSSD/sssd/pull/650
Title: #650: Implement a hybrid mode of generating private groups
jhrozek commented:
"""
I pushed yet another new version of the patchset which should hopefully address another
requirement in this feature which was that 'a real group must not be shadowed by an
autogenerated group even if the real group comes from a different domain'.
To this end, I used Sumit's idea and just moved all the logic into the NSS responder
because at that point we really need the cache_req requests to iterate over all the
domains.
@mzidek-rh please review
"""
See the full comment at
https://github.com/SSSD/sssd/pull/650#issuecomment-471525384