There was a logic bug in sysdb_search_selinux_usermap_by_username that
resulted in returning the value the variable "ret" had after the last call
to sysdb_attrs_get_uint32_t, which in cases the last rule processed did
not have the requested attributes led to using the default user context.
I think this would fix the strange bug Rob was seeing yesterday, but I
still need to verify that.