Hi,
see the attached simple patch for ticket:
https://fedorahosted.org/sssd/ticket/3045
The patch is missing a CI test. I will add
one (hopefully later tomorrow) after I take
a look at one bugzilla which has currently
higher priority.
If someone writes a test for this until then,
I will gladly review it :)
The reproducer is simple:
1. have ldap with RFC2307 schema with group
that contains user from /etc/passwd (for example
local_user)
2. run 'id local_user'
3. the ldap group should be among the displayed groups
Michal