[sssd PR#552][opened] GPO: Store security CSE settings of all applicable GPOs

[rdratlos]

   URL: https://github.com/SSSD/sssd/pull/552
Author: rdratlos
 Title: #552: GPO: Store security CSE settings of all applicable GPOs
Action: opened

PR body:
"""
When two or more GPO rules were defined on the server
and one of them contained no SIDs (no users or groups
were specified), then SSSD failed to store such rule
and users were denied access (system error).

Access control settings for users and groups (e.g.
allow/deny interactive login) may be split on more than
one GPO. Current SSSD implementation overwrites settings
of previously analyzed GPOs with the settings of
subsequently analyzed GPOs.

Check if allowed or denied SIDs retrieved from previous
GPOs are stored in the group policy result object within
the GPO cache and append missing SIDs, that have been
retrieved from subsequent GPOs in the GPO list.

Resolves:
https://pagure.io/SSSD/sssd/issue/3680

Signed-off-by: Thomas Reim <reimth(a)gmail.com&gt;
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/552/head:pr552
git checkout pr552