Frankly, I haven't noticed anything unusual in these logs.
Perhaps someone
else will.
One thought here:
could you install ldb-tools and try following?
ldbsearch -H /var/lib/sss/db/cache_<domain>.ldb | less
Look for a records of groups for which the groups command was unable to
find names. Do these records have attribute called 'name'? If not, is the
attribute 'cn' set on the AD server for each group?
I just noticed your other email saying you solved the problem. In that case
please disregard this request.
Thanks
Jan