[PATCH 1/2] SYSDB: make the sss_ldb_modify_permissive function public
SSIA
[PATCH 2/2] SYSDB: Expire group if adding ghost users fails with EEXIST
In some cases, the ghost attribute is propagated from a nested group
before being added during upgrade. In those cases, we need to ignore
EEXIST from the memberof ldb module to carry on with the upgrade and
also expire the group to make sure the correct group memberships are
fetched on the next lookup.