quick update regarding the GID override. If I override the GID (and the group name does
not exist in AD for that GID) , I can make the sssd client (both versions) work ONLY if i
run manually getent group <group_name>. I cannot do that for hundred of users and
thousand of servers (especially when the infrastructure is quit dynamic) , therefore I
would need an acceptable compromise, which eventually can be automated.