URL:
https://github.com/SSSD/sssd/pull/5597
Title: #5597: sss_cache: reset original timestamp and USN
elkoniu commented:
"""
Test environment:
- client machine
- LDAP server providing `user-1`
Test script:
```
#!/bin/bash
echo "RESTART SSSD
====================================================================="
systemctl stop sssd; sss_cache -E; rm -rf /var/lib/sss/db/*; rm -rf /var/log/sssd/*.log;
systemctl start sssd
echo "FETCH USER
---------------------------------------------------------------------"
id user-1
echo "FETCH GROUP
---------------------------------------------------------------------"
getent group group-1
echo "USER TIMESTAMP CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP TIMESTAMP CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
echo "USER CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
echo "CLEAR CACHE
---------------------------------------------------------------------"
sss_cache -E
echo "USER TIMESTAMP CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP TIMESTAMP CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/timestamps_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
echo "USER CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Users,cn=ldap.vm,cn=sysdb
echo "GROUP CACHE
---------------------------------------------------------------------"
ldbsearch -H /var/lib/sss/db/cache_ldap.vm.ldb -b cn=Groups,cn=ldap.vm,cn=sysdb
```
Vanila SSSD result:
```RESTART SSSD =====================================================================
FETCH USER ---------------------------------------------------------------------
uid=10001(user-1) gid=10001(user-1) groups=10001(user-1),20002(group-2),20001(group-1)
FETCH GROUP ---------------------------------------------------------------------
group-1:*:20001:user-1
USER TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393487
lastUpdate: 1620388087
objectCategory: user
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
initgrExpireTimestamp: 1620393487
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393487
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393487
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393487
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388087
dataExpireTimestamp: 1620393487
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
initgrExpireTimestamp: 1620393487
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1620393487
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388087
dataExpireTimestamp: 1620393487
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1620393487
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
CLEAR CACHE ---------------------------------------------------------------------
USER TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: user
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
initgrExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388087
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388087
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
initgrExpireTimestamp: 1620393487
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388087
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388087
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388087
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
```
SSSD with this PR included result:
```
RESTART SSSD =====================================================================
FETCH USER ---------------------------------------------------------------------
uid=10001(user-1) gid=10001(user-1) groups=10001(user-1),20002(group-2),20001(group-1)
FETCH GROUP ---------------------------------------------------------------------
group-1:*:20001:user-1
USER TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393598
lastUpdate: 1620388198
objectCategory: user
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
initgrExpireTimestamp: 1620393598
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393598
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1620393598
lastUpdate: 1620388198
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
dataExpireTimestamp: 1620393598
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388198
dataExpireTimestamp: 1620393598
initgrExpireTimestamp: 0
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1620393598
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388198
dataExpireTimestamp: 1620393598
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1620393598
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
CLEAR CACHE ---------------------------------------------------------------------
USER TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: user
dataExpireTimestamp: 1
initgrExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP TIMESTAMP CACHE
---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
dataExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
dataExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
lastUpdate: 1620388198
objectCategory: group
dataExpireTimestamp: 1
originalModifyTimestamp: 1
entryUSN: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
USER CACHE ---------------------------------------------------------------------
# record 1
dn: cn=users,cn=ldap.vm,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
fullName: user-1
gecos: user-1
gidNumber: 10001
homeDirectory: /home/user-1
name: user-1(a)ldap.vm
objectCategory: user
uidNumber: 10001
originalDN: cn=user-1,ou=users,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
isPosix: TRUE
lastUpdate: 1620388198
initgrExpireTimestamp: 0
memberof: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
memberof: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals
GROUP CACHE ---------------------------------------------------------------------
# record 1
dn: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20002
name: group-2(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-2,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-2(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-2(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 2
dn: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 10001
name: user-1(a)ldap.vm
objectCategory: group
isPosix: TRUE
originalDN: cn=user-1,ou=posix_groups,dc=ldap,dc=vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: user-1(a)ldap.vm
lastUpdate: 1620388198
dataExpireTimestamp: 1
distinguishedName: name=user-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 3
dn: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
createTimestamp: 1620388198
gidNumber: 20001
name: group-1(a)ldap.vm
objectCategory: group
lastUpdate: 1620388198
isPosix: TRUE
originalDN: cn=group-1,ou=posix_groups,dc=ldap,dc=vm
member: name=user-1(a)ldap.vm,cn=users,cn=ldap.vm,cn=sysdb
memberuid: user-1(a)ldap.vm
originalModifyTimestamp: 20210507114537Z
entryUSN: 20210507114537Z
nameAlias: group-1(a)ldap.vm
dataExpireTimestamp: 1
distinguishedName: name=group-1(a)ldap.vm,cn=groups,cn=ldap.vm,cn=sysdb
# record 4
dn: cn=groups,cn=ldap.vm,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=ldap.vm,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5597#issuecomment-834227538