URL:
https://github.com/SSSD/sssd/pull/60
Title: #60: Document ad_access_filter search for nested groups
sumit-bose commented:
"""
Thank you for the patch. Given the related discussion in ticket
https://fedorahosted.org/sssd/ticket/3218 I think it would help if you can add a sentence
saying that becasue of the ':' characters in the filter part the option must
always use the full format with DOM or FOREST and the name.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/60#issuecomment-255974002