Title: #128: Fix group renaming issue when "id_provider = ldap" is set
So I was thinking about this PR a bit more and I'm no longer sure we can rename groups
at will. I think we can only support that if we support multiple objects with the same ID
(which we currently don't and which would be a big task) or if we implement some
heuristics to see that it's indeed the same, just renamed group and not a conflict.
So, I suggest that we, before renaming the group check that at least one of these
- both objects have the same SID
- both objects have the same UUID
- both objects have the same originalDN
if these don't apply, then we can't know if the object is the same or different
and we thrown an error. What do you think?
See the full comment at https://github.com/SSSD/sssd/pull/128#issuecomment-321608219