[SSSD-users] Re: sssd id getent and secondary groups in active directory