[sssd PR#962][opened] nss: use real primary gid if the value is overriden (sssd-1-16)

[mzidek-rh]

   URL: https://github.com/SSSD/sssd/pull/962
Author: mzidek-rh
 Title: #962: nss: use real primary gid if the value is overriden (sssd-1-16)
Action: opened

PR body:
"""
SYSDB_PRIMARY_GROUP_GIDNUM contains original primary group id from AD
because any possible override may not be known at the time of storing
the user.

Now we try to lookup group by its originalADgidNumber and if it is found
we will replace the original id with real primary group id.

Steps to reproduce:
1. Enroll SSSD to IPA domain with AD trust
2. Add ID override to Domain Users `ipa idoverridegroup-add 'Default Trust View'
"Domain Users(a)ad.vm" --gid=40000000`
3. On IPA server: Remove cache for the overrides to apply immediately and restart SSSD
`sssctl cache-remove --stop --start`
4. On IPA server: Resolve user `id Administrator(a)ad.vm`

There will be visible both new and old gids without the patch.

Resolves:
https://pagure.io/SSSD/sssd/issue/4124

Reviewed-by: Sumit Bose <sbose(a)redhat.com&gt;
(cherry picked from commit 03bc96247cbd567ad11a4c693c1d90580f903bb7)
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/962/head:pr962
git checkout pr962

[sssd PR#962][comment] nss: use real primary gid if the value is overriden (sssd-1-16)

[mzidek-rh]

  URL: https://github.com/SSSD/sssd/pull/962
Title: #962: nss: use real primary gid if the value is overriden (sssd-1-16)

mzidek-rh commented:
"""
This is cherry picked from master and applies cleanly on 1.16 branch. Re-submitting as
sssd-1-16 PR to run it through CI.
"""

See the full comment at https://github.com/SSSD/sssd/pull/962#issuecomment-564555025

[sssd PR#962][+Accepted] nss: use real primary gid if the value is overriden (sssd-1-16)

[mzidek-rh]

  URL: https://github.com/SSSD/sssd/pull/962
Title: #962: nss: use real primary gid if the value is overriden (sssd-1-16)

Label: +Accepted

[sssd PR#962][comment] nss: use real primary gid if the value is overriden (sssd-1-16)

[mzidek-rh]

  URL: https://github.com/SSSD/sssd/pull/962
Title: #962: nss: use real primary gid if the value is overriden (sssd-1-16)

mzidek-rh commented:
"""
CI passed. Just adding accepted label so I do not forget to push it later.
"""

See the full comment at https://github.com/SSSD/sssd/pull/962#issuecomment-565004008

WARNING: MERGED [sssd PR#962][closed] nss: use real primary gid if the value is overriden (sssd-1-16)

[jhrozek]

*WARNING: this pull request has been merged!*
This is only mirrored repo thus any changes will be erased. Please push commit(s) to
authoritative repository.

   URL: https://github.com/SSSD/sssd/pull/962
Author: mzidek-rh
 Title: #962: nss: use real primary gid if the value is overriden (sssd-1-16)
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/962/head:pr962
git checkout pr962

[sssd PR#962][comment] nss: use real primary gid if the value is overriden (sssd-1-16)

[mzidek-rh]

  URL: https://github.com/SSSD/sssd/pull/962
Title: #962: nss: use real primary gid if the value is overriden (sssd-1-16)

mzidek-rh commented:
"""
sssd-1-16
80e6f714f6134a9ef7972fa5024d0d8c8e57c8d0
"""

See the full comment at https://github.com/SSSD/sssd/pull/962#issuecomment-565666429