>> Let me rephrase the use case:
>> 1) There is a Group1 that has users u1,u2,u3,...
>> 2) There is a Group2 that has users u1,...
>> 3) Group2 is nested into Group1
>> 4) Issue: if while processing Group 1 the nested group Group 2 not
>> processed first (before other users) then users from Group 2 are not
>> seen. If the Group 2 happens to be processed before other users in Group
>> 1 then all members of Group 1 are shown correctly.
>>
>> Right?
>>
>> --
>> Thank you,
>> Dmitri Pal
>>
Yes that's right.
Hi, I tried setting up a similar scenario with RFC2307bis LDAP server
and could not reproduce the problem. Both getent group calls return all
three users for me.
Can you add "debug_level = 9" into your /etc/sssd/sssd.conf, re-running
your tests with cache removed (rm -f /var/lib/sss/db/cache_$domain.ldb)
and sending your logs?
Thank you,
Jakub