When I did the enumgrent optimization patch I totally forgot about
nested groups for some reason.
Of course I broke them. The gain in performance although was just way
too substantial to just revert to the previous way of resolving nested
groups again and again at every search.
These 2 patches instead store unrolled groups by adding a new
operational attribute: memberuid
This attribute contains just the user name of any user directly or
indirectly (through a nested group) members of a group.
This way computation is done once at modify time and never again.
Fixes bug #291
Simo Sorce * Red Hat, Inc * New York