I was thinking if this issue can be avoided in general by using the
DN from the member attribute as well when adding the user to the hash table and came up
with
https://github.com/sumit-bose/sssd/commits/ghost_hash_dn. Can you check if this will
make the group lookup worked as well when you replace your 'CACHE: trim spaces in DN
before hash lookup' and 'CACHE: use talloc_pool to avoid malloc' with this
patch?
bye,
Sumit