URL:
https://github.com/SSSD/sssd/pull/234
Title: #234: HBAC: Use memberof ASQ search instead of originalMemberOf
sumit-bose commented:
"""
I think the approach currently used in the patch is ok especially since the old code also
used specific IPA knowledge to parse the DN. Nevertheless an additional comment in the
code why the other groups should be filtered out might help to better understand the
reasons in futire as well.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/234#issuecomment-293521487