Another possible solution would be to enable debugging for ldb functions.>It is a bug in processing group hierarchy in sssd.
>
>It would be good if you could provide a minimal reproducer
>because I expect you cannot dump whole directory server for us :-) :-) :-)
>
So we might see also action and not only result.
curl -O /usr/local/lib64/sss_ldb_debug.so https://lslebodn.fedorapeople. org/sss_ldb_debug/sss_ldb_ debug.so
echo "LD_PRELOAD=/usr/local/lib64/sss_ldb_debug.so" >> /etc/sysconfig/sssd
* clear sssd cache and old sssd log files; rm -f /var/lib/sssd/db/* /var/log/sssd/*
* increase debug_level in domain section
* restart sssd
* reproduce problem
An provide sanitized log files. Feel free to send them privately
if you do not want to send them to mailing list.