URL:
https://github.com/SSSD/sssd/pull/614
Title: #614: nss_protocol_fill_initgr: skip incomplete groups instead of bailing out
jhrozek commented:
"""
I'm not against this patch (I just had no time so far to do any test) but my primary
question is why do we have the incomplete groups in the cache? I thought if we could only
read the SID from the tokengroups but then not resolve the SID then we would have a group
name stored with name=sid.
So I don't think there's anything wrong with the patch, I just wonder if we would
be papering over another bug with it.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/614#issuecomment-405348786