URL:
https://github.com/SSSD/sssd/pull/5404
Title: #5404: nss: check if groups are filtered during initgroups
pbrezina commented:
"""
> Do you think that there's is someone who's using this
behavior?
Do you mean that somebody relies on the fact that a user can still be a member of a
filtered group?
Yes. IMHO since you can't resolve the group's name, you'd need to work with
gid only. And filtering out group only to match it by gid in user's initgroups sounds
like nonsense and we can just filter it from initgroups unconditionally.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5404#issuecomment-733032584