Hi,
see the attached patch. To reproduce, just run 'getent group
nosuchgroup(a)ad.trusted.domain' and make sure that with the patch
applied, groups_get_done() or users_get_done() also run and attempt to
delete the nonexistant user or group.
Additionally, there is a variable called user_dom in the codepath which
handles both users and group. Shall I rename it to obj_dom or similar?