[SSSD] [PATCHES] SDAP: Filter ad groups in initgroups

[Lukas Slebodnik]

ehlo,

the problem is that with current master and 1.12 the domain local groups
from subdomain are not filtered.

The 1st patch partially fixes the problem. The name of group is not visible
after "id user", but there is a GID which does not have a name.
BTW without this patch "Distributions groups" needn't be filtered with
disabled
tokengroups. It might explain some cases where groups were missing with
disabled tokengroups. Users might use this bug as a workaround.

The last patch filter domain local groups from subdomains
while doing initgroups. So there will not be GIDs without name.

Please try to review patches very soon. So we can fix regression with
domain local groups caused by recent optimalisation of initgroups.

LS