[SSSD] [PATCH] correctly resolve nested groups (#264)