On Fri, Jan 23, 2015 at 11:52:09AM -0500, Simo Sorce wrote: > What happens to group memberships that span multiple domains this way ? > > Simo. They are not resolved, SSSD skips them as from SSSD's point of view the membership points outside the server's search bases.