[SSSD] getent passwd works with LDAP but *not* getent group